Dell DX6004S 시작하기 매뉴얼 - 페이지 9

{카테고리_이름} Dell DX6004S에 대한 시작하기 매뉴얼을 온라인으로 검색하거나 PDF를 다운로드하세요. Dell DX6004S 28 페이지. Document
Dell DX6004S에 대해서도 마찬가지입니다: 보충 설명서 (4 페이지), 사용자 설명서 (46 페이지), 설정 및 구성 매뉴얼 (43 페이지), 설치 및 구성 매뉴얼 (35 페이지), 공지 사항 (28 페이지), 공지 사항 (20 페이지), 개요 (19 페이지), 구성 매뉴얼 (9 페이지), 구성 매뉴얼 (9 페이지), 릴리스 노트 (8 페이지), 구성 매뉴얼 (7 페이지), 릴리스 노트 (6 페이지), 릴리스 노트 (5 페이지), 릴리스 정보 (5 페이지), 시작하기 매뉴얼 (49 페이지)

switches, the network connection between switches must be faster than the individual ports. Contact

your switch provider for information about proprietary software or use a mechanism such as

aggregation.

2.1.4. Internet Deployments

Network security is one of the top considerations during the deployment of any service on the

Internet or within an extensive enterprise WAN. In these types of deployments, put a firewall or

filtering router in front of DX Storage to control the kind of traffic and requests that are allowed to

reach the cluster nodes.

The preceding figure shows a firewall that allows requests on TCP/80. This is the default SCSP port,

but it should be changed to match the scspport value set in the node or cluster configuration file for

the DX Storage cluster if it is something other than 80.

If the firewall is sophisticated enough to examine Layer 7 (Application Layer), or the contents of

the HTTP requests, further restrictions should be made to allow only GET, HEAD, POST, DELETE

requests. If a cluster is exposed read-only to these external clients, the POST and DELETE

requests can be blocked to prevent updates to the cluster. To prevent client access to the node

status page, the firewall should deny "GET /" requests to the cluster nodes.

Administrators should block Internet access to the Admin Console port (default TCP/90) and to

the SNMP port (UDP/161). In wide-area networks, further restrictions might be desirable to restrict

access to these services to specific administrative networks or workstations.

Anytime critical devices such as firewalls are introduced into a network architecture, they should be

deployed in redundant pairs to minimize the chance of failures that cut-off all client access.

Client applications must be able to initiate TCP connections with all nodes in a DX Storage cluster

using the designated access port, typically port 80. Internally, DX Storage nodes must be able to

communicate with each other using UDP, TCP, and multicast.

The following topics in this section discuss how to set up a DX Storage cluster in a standard TCP/IP

networking environment:

•

Section 2.2.1, "Network Summary"

link

Version 5.0

December 2010