Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cassandra.apache.org
Received-SPF: pass (nike.apache.org: domain of sdolgy@gmail.com designates
 209.85.212.44 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:from:date:message-id:subject:to:content-type;
        b=UAG4ZvxB296MF44cKqnDy9n6MxJt9IT4AaV0TwhLedeGWPmvqWMuMhOZZ7A+LvKp+J
         polSjU5K66o781sdp8kjaRy6oGy3IM3GrJWOxUOf7x7B3DlHamUQJ9V0v0/Y9gKdLa68
         rYF16za4qLya5DNHEiCRmttNXVkrDouv12L2w=
MIME-Version: 1.0
From: Sasha Dolgy <sdolgy@gmail.com>
Date: Tue, 26 Apr 2011 19:20:28 +0200
Message-ID: <BANLkTikmeP=DREjLrf+i6DEQiTuCffB1Zw@mail.gmail.com>
Subject: Re: IP address resolution in MultiDC setup (EC2)/VIP
To: user@cassandra.apache.org
Content-Type: text/plain; charset=ISO-8859-1

Ok, on each node, I have configured the listen address for cassandra
as the VIP interface (tunXXX). This allows other cassandra instances
to connect ONLY through the VPN network. The listen address is not
configured for the eth0 interface (EC2).

rpc_address is set to 0.0.0.0 so that it can listen on all interfaces.
if it's left blank, it will default to the value of the listen
configuration ... which would
mean all appserver -> cassandra traffic would be routed through the
VPN connection (not what I want).

When looking at netstat, I see the following on a node:

tcp 0 0 0.0.0.0:9160 0.0.0.0:* LISTEN
tcp 0 0 172.16.1.7:7000 0.0.0.0:* LISTEN

9160 allows clients to connect to the environment to GET/PUT data
while the VPN interface is for node to node, secured, communication.

As you see, I'm not referencing the EC2 IP anywhere in the
configuration.  This allows me to leverage rackspace, amazon or any
other services provider ... so long as my vpn tunnels are configured
appropriate for each endpoint / environment.

-sd


On Tue, Apr 26, 2011 at 3:55 PM, pankaj soni <pankajsoni0126@gmail.com> wrote:
> Hi,
> I have a question regarding Vyatta or any providing VIP in general. While
> routing through gateway do we bind it to ec2 nodes private IP or public IP?
> Also, in general could you explain how VIP might help for I am new towards
> this side of field.
>
> thanks