pestaa's questions

I'm getting started with physical server clustering, and have plans for a 3 node hyperconverged oVirt setup.

I currently deploy all my apps and sites on VPSes and API-provisioned cloud instances. I have some experience with HA, but for each project ultimately there is a single load balancer or webserver, to which a domain name is pointed at.

I understand an oVirt cluster is configured so that each node is FQDN-accessible, be it via a VPN or public names.

But how do I run multiple public vhosts from the cluster when any vm can be moved to practically any host? Should I list all host IP addresses as separate DNS A records and rely on browser failover? Seems odd. Or should I extend the whole cluster with a separate firewall/router that acts as an entry point for all TLDs? Again it becomes a single point of failure and an additional box to colo. Or could it be mandatory to script the zone update?

I'm possibly missing something utterly obvious; all advice is greatly appreciated. Thanks!

2010/09/19 14:52:07 [error] 1419#0: *10220 recv() failed
(104: Connection reset by peer) while reading response header from upstream,
client: [...], server: [...], request: "POST /[...] HTTP/1.1", upstream: 
"fastcgi://unix:/server/php-fpm.sock:", host: "[...]",
referrer: "[...]"

This is the error I'm receiving randomly. 95% of the time my setup works perfectly, but once in a while I'm getting 502 for 3-4 subsequent requests.

I'm using Unix socket between the server and the PHP process as you can see, also have set up FastCGI params (SCRIPT_FILENAME), etc. correctly.

What can I do about it to strengthen the connection between these services?

Thank you very much in advance.

I'm obviously using the wrong search terms, the answer must be somewhere out there, so please throw some URLs at me.

I'm about to create a cluster with 2 virtual servers in the cloud, namely at Rackspace.

One for the frontend (Apache+PHP), one for the backend (presumably PostgreSQL).

Apart from pointing the database host to the another IP instead of localhost, and opening up the , is there anything else I'm supposed to learn or prepare to fully utilize this architecture?

What are your checklist/routine when setting up a Linux web server?

What do you recommend to achieve maximum security?

Is there any preferred way to perform repeated maintenance?