File Share Encryption

 View Only
  • 1.  Universal Server clustering

    Posted Aug 03, 2012 04:13 AM

    Hi,

    We are running PGP Universal Server 3.0.2, and I would like to create a cluster to provide some DR at another site.

    If I do this, when I switch off the original server which all our clients are pointing to from the client install process, will the clients automatically connect to the replica server which is the only one now on the network?

     

     



  • 2.  RE: Universal Server clustering

    Posted Aug 03, 2012 05:26 AM

    That will depend on a few things:

    1. Do you use it for gateway email
    2. Do you use it for web messenger

    Remember it doesn't load balance by default, you will have to either change their DNS to point it to the other machine, or use round-robin dns, or set this up with a hardware load-balancer (the preferred solution)

    So what I would do if you are going to have a cluster permenantly is:

    • Setup 2nd UN with same FQDN as 1st
    • Install Load-balancer
    • Put 2nd UN onto the network
    • Set up clustering and allow appropriate time for replication

    You can then safely shutdown the 1st to do whatever you want to it, and turn it on without interruption to mail or workflows

     



  • 3.  RE: Universal Server clustering

    Posted Aug 03, 2012 10:01 AM

    Hi,

    No we don't use it for :

    • gateway email
    • web messenger

     

    We don't use the mail feature at all.

    The first server was installed as the actual server name, so I guess I would need to rebuild it with an alias name (keys.pgp.com), to have any hope of using the cluster properly.



  • 4.  RE: Universal Server clustering

    Posted Aug 03, 2012 10:10 AM

    Yea, best practices is to use keys.domainnamehere.tld for other UN to look up, otherwise the public directory would be useless, or you can just do it via DNS, add a CNAME that points keys.example.com to pgpserver.example.com and that will suffice.

    If you don't use it for gateway email, you should be fine, but like i said if you want it to cluster properly it needs to be load balanced before it hits the server via either round robin or a hardware load balancer.