MACROMEDIA COLDFUSION 5 - INSTALING AND CONFIGURING SERVER, Руководство пользователя

Страница: 154 / 160

142 Appendix Preparing Your Server for ClusterCATS
Configuring firewalls
Many corporate environments today rely on firewalls to securely control access to
proprietary knowledge that resides on public Internet sites, intranet sites, or private
extranet sites. You can configure ClusterCATS to work across one or more firewalls.
A common technique is to use Network Address Translation (NAT) as a security
precaution on your firewall. This configuration segregates internal and external
resources and facilitates extra control and monitoring of Web traffic.
Using ClusterCATS with NAT:
1 Before creating a cluster, you must configure the source of internal and external
name resolution. To reset a server with improper name resolution, select
Start >
Programs > ColdFusion Server 5 > ClusterCATS Server Administrator >
Advanced > Reset
. Reset each server twice.
2 Make certain that the addresses you are translating, which should correspond to
the outside DNS but not the round-robin entries, contain forward and reverse
DNS entries corresponding to FQHN. Modify the DNS accordingly.
3 Make certain that the internal addresses, those addresses already translated by
the firewall and corresponding to the internal servers, contain forward and
reverse DNS entries corresponding to FQHN. Modify the DNS accordingly.
Note
If no internal DNS server is available, you can use the hosts files as the source of
name resolution.
4 Ensure that internal names match external names. The difference between the
external FQHN and the internal FQHN should be the IP addresses. For example,
examine DNS entries for the following clusters of two servers:
External
Forward Reverse
Server 1 FQHN www1.company.com
205.205.205.10
205.205.205.10
www1.company.com
Server 2 FQHN www2.company.com
205.205.205.20
205.205.205.20
www2.company.com
Server 1 Round-Robin www.company.com
205.205.205.10
Server 2 Round-Robin www.company.com
205.205.205.20
install.book Page 142 Thursday, May 10, 2001 12:59 PM