[PVE-User] 'HA' on a single node...

[Marco Gaiarin <gaio@sv.lnf.it>]

OK, subject is a bit an oxymoron, but...


I need to setup a PVE standalone server, where one of the VMs is a
firewall, that permit the connection to the Internet, and so also the
management of the PVE instance.

If 'something' (in the mostly vague sense of) goes wrong, and the
firewall VM does not start, i'm cutted out.

I think i've two chices:

a) move the firewall part, at least the more critical one, to the
 phisical node, PVE. This is simple and effective, but clearly not a
'clean' solution.

b) use a VM as firewall, but built around it some sort of 'HA', eg some
 scripts or something like that will do all the effort possible to keep
the 'firewall' VM running.

Because the firewall VM will be a rather simple one, could be also
something like: throw away current vm and restore the more recent
backup.


Someone have just done something like that? Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)