Setting a floating IP in a solaris local zone!!

I want to install my fault tolerant application in two different
solaris local zones just to save the hardware cost and for testing
purposes.
Earlier before solaris 10, My application runs on two different
machines and receives the incoming requests on a floating IP, thus it
achieves the Fault tolerant behavior with floating IP moving across
the machines on the active application.
There was a separate monitoring process on each machine which runs as
root user and sets and unsets the floating IP using ioctl system calls
on a particular machine as per request received from the application.
Now i want to replicate the same behaviour in solaris 10 setup with my
Fault tolerant application running on two local zones and my
monitoring process which runs on each local zone, set and unset the
floating IP on the particular local zone.
No i want to know that if it is possible for any application to set
floating IP on a particular local zone, from that zone itself and how
can we achieve the same?
regards,
rish

<div class="jive-quote">
<span class="jive-quote-header">MichaelMyers wrote:</span>
I gather some big changes are afoot with the IP stack and zones with the latest Solaris update (the 8/07, update 4 release) -- each zone either does or can have it's own IP stack. This may change the answer to this question...those who's been playing with Open Solaris and/or Solaris Express probably can answer more about that.
</div>
That's correct. You can now use private IP instances for a non-global zone if you want. That zone will now have it's own IP stack and can up/down addresses or whatever. But for now they have to have their own dedicated "interface". This has to be an ethernet device or a VLAN device.
<div class="jive-quote">
<span class="jive-quote-header">
On an unrelated note: the new forum editor apparently doesn't have a way to insert "code" type examples (eg. pre-formatted, in courier, etc.)...
</span>
</div>
Yup. Even in the old editor it was inconsistent where worked.  Some forums it would, but not all.  I guess now it consistently doesn't work? :-)<br />
<br />
-- <br />
Darren<br />                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

Similar Messages

  • How to dynamically set max-rss size for a local zone?

    Running solaris 10 05/08.
    Following situation: Three local zones in a Veritas cluster. The zones
    can fail over but normally not all three are on the same physical box.
    I want to be able to restrict physical memory usage for the zones in
    situations where certain combinations of them end up on the same
    physical box. So, I need to be able to dynamically change memory
    resources. I know how to do this with, for example locked memory:
    prctl -n zone.max-locked-memory -r -v <mem> `pgrep -z <zone name>
    init`
    but i need to do this for physical memory and I can't see that there
    is a zone resource for this? I thought this was added in 05/08?

    Hi
    You can do this by using rcapd from the global zone
    - start rcapd from the global zone:
    svcadm enable svc:/system/rcap:default
    - set a physical memory caping value for each zone
    rcapadm -z your_zone -m max_rss_value
    - check the memory use for all the zone capped
    rcapstat -gz
    You can set the rss capping value in the zone configuration:
    # zonecfg -z your_zone
    zonecfg:busi-app-prod> add capped-memory
    zonecfg:busi-app-prod:capped-memory> set physical=900m
    zonecfg:busi-app-prod:capped-memory> end
    zonecfg:busi-app-prod> verify
    zonecfg:busi-app-prod> commit
    zonecfg:busi-app-prod> exit
    This will be take in account at the next reboot of this zone.
    Have a also a look to rcapadm to tune rcapd
    Bye
    Fred

  • Solaris 10, java, local zone and priority

    Hi,
    I have asked this on the Solaris 10/Zone forum 4 days ago but didn't
    get any response. Maybe I get better luck here?
    I have a jboss container running like a dog. It's running on a niceness
    of 10 (by default - why?); renice fails with
    $ renice -n 0 1635
    renice: 1635:setpriority: Not owner
    How do I fix that, and how can I get jboss to run with a niceness of
    0 or 1 at startup?
    I did manage to up the niceness manually from the global zone, but that's
    not really an option once the system goes production. How/where do
    I set java tasks to run with a sensible priority by default?
    It appears that anything java (even within the global zone) runs on a
    niceness of 20 (10 is what we see inside a local zone, the global will
    report 20 in prstat).
    Cheers

    I removed this file,/usr/lib/libmlib/libmlib_sse.so.2, but I can't still use java desktop...
    is there any other solution?

  • Solaris 10, local zone & vcs

    Hi,
    Anybody tried running vcs from within a solaris 10 sparse local zone?
    We currently have two T2000' s each running Solaris 10 6/06. I've installed Veritas Foundation Suite 4.1 on each and configured vcs. The cluster is functioning with failover enabled & tested. (I have a test service group running consisting of a 'hello world' program sitting on a VRTS volume/diskgroup on a SAN). This is all running fine in the Global Zone.
    As part of our requirement we want to be able to run vcs from within a local zone, hence my creation of a sparse zone. I would like full clustering functionality running from within a zone on one server with failover/switching to an equvialent zone on the the second server.
    I have played with the 'zone' option when setting up service groups but not surprisingly this is for switching the whole zone. Not what I want to do.
    Am I failing to grasp this whole sparse zone idea? or am I missing something obvious, trying something that cant be done? Any help, particularly from somebody else thats tried this would be appreciated.
    Thansk in advance,
    Mark

    Hello,
    I can't help you a lot, but i have found that there is a lot of things that a local zone can't do when it comes to "kernel" things. As of today i found that you do NFS from a zone, for example.
    As your problem seems to be related to filesystem it is probable that you can't do it from a zone. Again, i'm not sure.

  • Network access from local zones on a Solaris 10 router

    I'm kind of stuck at an interesting problem.
    I have a Solaris 10u6 system which is itself a router between a number of networks.
    It has several dozen routes to different networks via different next-hop gateways,
    just one of which is a default route to the ISP to internet.
    I thought of setting up local zones to securely run infrastructure services (BIND,
    Squid, Mail relay) on this machine, with only a single dedicated public IP address
    (from our delegated address space) per such zone. Zones use a shared-IP stack
    on one of the machine's VLAN interfaces (the LAN part with public IP addresses).
    The problem is - since this machine is the gateway for the subnet used for the
    local zones, they don't inherit any default route. The one default we have to the
    ISP is on another interface's subnet.
    [root@ns8 /]# netstat -rn | grep default
    [root@ns8 /]# netstat -rn | wc -l
    50
    On a side note, these zones do inherit dozens of other routes (50 above) with
    next-hop routers not on the local zone's subnet - so these are also not accessible.
    I think such useless routes should also be filtered away - as "mismatching" default
    routes are.
    Due to all this the zone has no networking outside its subnet/mask: it doesn't
    even try to send anything, since there is not a single route with a matching next
    hop router, i.e.
    [root@ns8 /]# traceroute -nI 194.87.0.50
    traceroute to 194.87.0.50 (194.87.0.50), 30 hops max, 40 byte packets
    1 xx.yy.zz.8 0.102 ms !H 0.032 ms !H 0.027 ms !H
    To reiterate, this setup is different from that of the numerous replays of "How to
    set up internet for zones with virtual IP addresses?"
    That recipe suggests to add a fake router and maintain its ARP address to be
    that of the real default gateway, and set up NAT to rewrite private IP addresses
    to the global zone's public IP. While I've also used the recipe a number of times,
    it does not seem feasible in this router's case - there are too many next-hop
    routers (and learned with a dynamic routing protocol), not just one default-gw.
    I can of course go back to running services in the global zone and binding them
    to these dedicated public IP addresses via configuration files - and this works
    since the global zone has access to any needed routers having IP addresses
    in relevant subnets - but I hoped to secure the system a bit more and separate
    routing from infrastructure tasks...
    So the question is: how can I set up networking for local zones in this case
    when they are running on a router? Is it possible?
    Thanks,
    //Jim

    You can set the Airport Extreme in "Bridge" mode, and then it will just extend the existing subnet.
    Airport Utility -> Airport Extreme -> Internet -> Connection Sharing -> Off (bridge mode)

  • How to gather a set of floating point numbers from a web page form?

    I am pretty new to Java and I am working on a project to apply Benfords law to find the probability of digits submitted by the user. My first step is to gather set of floating point numbers from a web page. How do I go about doing this? Any suggestion or a proper site where I can learn this stuff will be highly appreciated.

    I am using NetBeans IDE 5.5.1 and for this project. I have realized that the first question was not well phrased.
    I created a web project with 2 jsp files and a class file in it. When my jsp file runs I ask the user to enter a number for finding the probablility based on Benfords law.
    This is what I got so far:
    This is input.jsp
    <h1></h1>
    Please enter a number to be checked
    <form action="result.jsp" method="post">
    <input type="number" name="number" >
    <input type="submit" value="Check number">
    </form>
    </body>
    </html>
    This is result.jsp
    String number=request.getParameter("number");

  • Solaris 10 local zone setup requirement/steps for am/ps 7.0 installation

    Hi,
    Is there any document available on solaris 10 local zone creation/requirement for am server/ portal server 7.0 install? Any help/pointer is appreciated.
    Thanks,

    I don't believe there is any specific documentation am/portal in a zone. And as far as I know there are no specific requirements either. I have successfully installed portal in a solaris zone.
    A good starter tutorial on zones is here: http://partneradvantage.sun.com/protected/solaris10/adoptionkit/tech/zones/tutorial.html
    Hi,
    Is there any document available on solaris 10 local
    zone creation/requirement for am server/ portal
    server 7.0 install? Any help/pointer is
    appreciated.
    Thanks,

  • Set rlim_fd_cur=8192 for Solaris 10 Zone?

    Hi!
    I would like to install SAP Solution Manager 7.0 on Solaris 10 Zone (Sparc 64 Bit).
    Unfortunately I could find the file etc/system. Instead I added the project file acording to SAP note 724713.
    When I run SAP prerequisite Checker SAPINST tells me that the following will be missed:
    set rlim_fd_cur=8192 in etc/system.
    Question:
    Do I need to add the file etc/system and add them the following commando:
    set rlim_fd_cur=8192?
    Or does this commando not apply for Solaris 10?
    Thank you very much!
    regards
    Thom

    > In solaris 9 and below, it was needed to add the parameter in /etc/system. With solaris 10 no need.
    This is not completely true.
    The number of maximum open files must be set in the global zone, otherwise you will run into problems once the total number of processes in all zones will be > 1024 - hence you need to also set this in Solaris 10.
    A zone has no /etc/system thus that error can be ignored.
    Markus

  • Install NetConnect in Global Zone of Solaris 10 x86 with 5 local zone fail

    Problem:
    Install NetConnect in Global Zone of Solaris 10 x86 with 5 local zone failed
    But I didn't have any issue with the same pkg in Solaris 9
    Steps taken:
    # groupadd netcon
    # useradd -d /export/home/netcon -g netcon -m netcon
    # vi /etc/shadow
    change LK to NP
    # ./UninstallNetConnect.003.002.001.sh
    # ./InstallNetConnect.003.002.001.sh
    Enter the user account to use: netcon
    Enter group: netcon
    Installing Sun(SM) Net Connect Proxy Core as <SUNWsrspx>
    ## Installing part 1 of 1.
    /etc/opt/SUNWsrspx/CustomerCert.pem
    /etc/opt/SUNWsrspx/SRSCACert.pem
    /etc/opt/SUNWsrspx/binaries
    /etc/opt/SUNWsrspx/srsproxyconfig.cfg
    /opt/SUNWsrspx/bin/srsexec
    /opt/SUNWsrspx/bin/srsinstall
    /opt/SUNWsrspx/bin/srsinstallmode
    /opt/SUNWsrspx/bin/srsproxy
    /opt/SUNWsrspx/bin/srspxrun
    /opt/SUNWsrspx/bin/srspxstat
    /opt/SUNWsrspx/bin/srspxtrace
    /opt/SUNWsrspx/bin/srsuser
    /opt/SUNWsrspx/bin/srsxfer
    /opt/SUNWsrspx/lib/srsimapi.jar
    /usr/lib/libsrsimapi.so.1
    [ verifying class <none> ]
    ## Executing postinstall script.
    copying initial install customer cert into place
    copying initial install srs cert into place
    copying initial install proxy config file into place
    removing any existing uninstallscript before copying the correct one
    copying uninstall script into place
    /var/sadm/pkg/SUNWsrspx/install/postinstall: /opt/SUNWsrspx/bin/srspxrun: cannot execute
    proxy queue initialization failed
    pkgadd: ERROR: postinstall script did not complete successfully
    Installation of <SUNWsrspx> failed.
    ERROR: pkgadd failed for: SUNWsrspx
    Please correct this situation and rerun the installation.
    Exiting installation.
    # cat /var/adm/messages
    Oct 7 00:00:01 planet root: [ID 702911 daemon.error] ERROR: proxy queue initialization failed
    Any clue, or it will only possible in Global zone that didn't have any local zone
    thanks in advance

    Problem:
    Install NetConnect in Global Zone of Solaris 10 x86
    with 5 local zone failed
    But I didn't have any issue with the same pkg in
    Solaris 9
    Steps taken:
    # groupadd netcon
    # useradd -d /export/home/netcon -g netcon -m netcon
    # vi /etc/shadow
    change LK to NP
    # ./UninstallNetConnect.003.002.001.sh
    # ./InstallNetConnect.003.002.001.sh
    Enter the user account to use: netcon
    Enter group: netcon
    Installing Sun(SM) Net Connect Proxy Core as
    <SUNWsrspx>
    ## Installing part 1 of 1.
    /etc/opt/SUNWsrspx/CustomerCert.pem
    /etc/opt/SUNWsrspx/SRSCACert.pem
    /etc/opt/SUNWsrspx/binaries
    /etc/opt/SUNWsrspx/srsproxyconfig.cfg
    /opt/SUNWsrspx/bin/srsexec
    /opt/SUNWsrspx/bin/srsinstall
    /opt/SUNWsrspx/bin/srsinstallmode
    /opt/SUNWsrspx/bin/srsproxy
    /opt/SUNWsrspx/bin/srspxrun
    /opt/SUNWsrspx/bin/srspxstat
    /opt/SUNWsrspx/bin/srspxtrace
    /opt/SUNWsrspx/bin/srsuser
    /opt/SUNWsrspx/bin/srsxfer
    /opt/SUNWsrspx/lib/srsimapi.jar
    /usr/lib/libsrsimapi.so.1
    [ verifying class <none> ]
    ## Executing postinstall script.
    copying initial install customer cert into place
    copying initial install srs cert into place
    copying initial install proxy config file into place
    removing any existing uninstallscript before copying
    the correct one
    copying uninstall script into place
    /var/sadm/pkg/SUNWsrspx/install/postinstall:
    /opt/SUNWsrspx/bin/srspxrun: cannot execute
    proxy queue initialization failed
    pkgadd: ERROR: postinstall script did not complete
    successfully
    Installation of <SUNWsrspx> failed.
    ERROR: pkgadd failed for: SUNWsrspx
    Please correct this situation and rerun the
    installation.
    Exiting installation.
    # cat /var/adm/messages
    Oct 7 00:00:01 planet root: [ID 702911 daemon.error]
    ERROR: proxy queue initialization failed
    Any clue, or it will only possible in Global zone
    that didn't have any local zone
    thanks in advance
    [I believe that it does not work in x86, watches with pkginfo - l SUNWsrspx, in the platform.
    Willy Suarez
    Sopport UNIX
    Colombia/code]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

  • Local zones during global shutdown in Solaris 10

    Hello,
    I am trying to determine if issuing a shutdown command from the global zone, e.g. shutdown -g0 -i5 -y performs graceful shutdowns on any running local zones, or does it issue a halt to the local zones without running shutdown scripts in them.  Searching the Solaris zones forum brings up some older discussions (pre 2010) where users reported a halt was done, but the expectation is this would be changed in later Solaris 10 patches or revisions.  Has this ever been addressed?    Is there a way to determine if a local zone has been halted or shutdown?  What is the recommended way to perform a shutdown of a global zone, when local zones are running?
    Thanks,

    The global zone will run a "svcadm disable zones" for each zones and this corresponds to a "zoneadm shutdown" or "zoneadm halt". Both zoneadm command will use a "init 0" in each zone.
    If you have a zone that requires a shutdown script to stopping for example a database gracefully, then you should run the shutdown inside each zone directly.

  • Sun Live Upgrade with local zones Solaris 10

    I have M800 server running global root (/) fs on local disk and running 6 local zones on another local disk. I am running solaris 5.10 8/07.
    I used live upgrade to patch the system and created new BE (lucreate). Both root fs are mirror as RAID-1.
    When I ran lucreate, it copies all 6 local zones root fs to the global root fs and failed no enogh space.
    What is the best procedure to use lu with local zones.
    Note: I used lu with global zone only, and worked without any problem.
    regards,

    I have been trying to use luupgrade for Solaris10 on Sparc, 05/09 -> 10/09.
    lucreate is successful, but luactivate directs me to install 'the rest of the packages' in order to make the BE stable enough to activate. I try to find the packages indicated , but find only "virtual packages" which contain only pkgmap.
    I installed upgrade 6 on a spare disk to make sure my u7 installation was not defective, but got similar results.
    I got beyond luactivate on x86 a while ago, but had other snags which I left unattended.

  • Unable to set Raid5 device read_ahead_kb value with rc.local

    In my rc.local I have two commands
    echo 16384 > /sys/block/md0/md/stripe_cache_size
    echo 1024 > /sys/block/md0/queue/read_ahead_kb
    The first command works properly, but the second command does not.
    cat /sys/block/md0/md/stripe_cache_size
    16384
    cat /sys/block/md0/queue/read_ahead_kb
    128
    However, I can run the command manually after my system has booted up and it works as expected
    echo 1024 > /sys/block/md0/queue/read_ahead_kb
    cat /sys/block/md0/queue/read_ahead_kb
    1024
    I think there is only one possible explanation and that is that something on my system is setting read_ahead_kb to 128 sometime after rc.local has been run during bootup.
    However I never set anything to do that, so I have no idea what is doing it or how I can stop it from happening.
    Does anyone have any troubleshooting suggestions for me?
    I'm completely stumped.

    In my rc.local I have two commands
    echo 16384 > /sys/block/md0/md/stripe_cache_size
    echo 1024 > /sys/block/md0/queue/read_ahead_kb
    The first command works properly, but the second command does not.
    cat /sys/block/md0/md/stripe_cache_size
    16384
    cat /sys/block/md0/queue/read_ahead_kb
    128
    However, I can run the command manually after my system has booted up and it works as expected
    echo 1024 > /sys/block/md0/queue/read_ahead_kb
    cat /sys/block/md0/queue/read_ahead_kb
    1024
    I think there is only one possible explanation and that is that something on my system is setting read_ahead_kb to 128 sometime after rc.local has been run during bootup.
    However I never set anything to do that, so I have no idea what is doing it or how I can stop it from happening.
    Does anyone have any troubleshooting suggestions for me?
    I'm completely stumped.

  • Can I set two router IP on my solaris x86 server?

    Hi ,
    I want to make traffic balance on my office. Because we have two leased line.
    I would build up NAT in the solaris x86.
    Can I set two router ip in the solaris x86 server? And How to do it?
    The traffic balance is work or not?
    If that is not work, what can I do?
    Thanks All ^_^
    Andrew Choi

    Yes, you can use solaris x86 as a NAT box.
    add another ethernet interface, and install
    IP-filter, or sunscreen
    I suggest you search the solaris newsgroups on
    http://groups.google.com for more specific links to
    how-tos

  • I set my cRIO from 'DHCP' to 'link local' and lost contact with it.

    I set my cRIO from 'DHCP' to 'link local' and lost contact with it.
     I changed the setting at the placed labeled "2" to link local only, then I think I hit save at "3".  Then poof, I had no network contact with my cRIO.  
    I tried;
        Hitting the reset button
        Opening a closing MAX
        Going to safe mode
        Throwing the Reset IP switch 
        Power cycling the cRIO
        Running cat 5 cable directly from the Host to my target
    None of it worked, and I have no contact with my cRIO.
    This is what MAX looks like now.  How can I fix this?
    Solved!
    Go to Solution.

    Make sure to disable the firewall on your computer.
    Otherwise you can check through the steps in this documentation:
    http://digital.ni.com/public.nsf/allkb/ABE4BC247E8​AC9BC8625734E005CAB42
    Note specifically that one option is to read the console out from the target VIA the serial port will a null modem cable during boot and it will indicate what IP the system is using.
    Craig H. | CLA | Systems Engineer | National Instruments

  • Solaris 10U1 needs to be to patched to SunUC 1.0.4 for local zones support

    The version of Sun UC integrated into S10u1 does not support systems with local zones configured. This has since been fixed but you first need to patch the system to upgrade to Sun UC 1.0.4. This can be done on a SPARC system as follows:
    $ smpatch download -i 121118-06
    $ smpatch add -i 121118-06
    For X86 the patch is 121119-06.

    This implies that ODP.NET does NOT need to be installed on a client. However, I cannot find OraOPs9.dll on a machine with Client Release 9.2 installed. Should OraOps?.dll automatically come with a Client installation of 9.2 or higher?
    ODP.NET needs to be installed on the client. OraOps9.dll is part of ODP.NET, not the Oracle Client.
    Also, if an application is built with the 10g ODP.NET, can it be run from a machine with OraOps9.dll?
    If an application is built with 10g ODP.NET, it can be run with 9.2 ODP.NET as long as you do not use any 10g APIs. The new features in 10g ODP.NET are included in the doc and the ODP.NET FAQ for your reference.

Maybe you are looking for