Hi,
I have applied traffic shaping on firewall running CentOS 4.5.
eth1 is the device where I have done traffic shaping. I am now running some monitoring tools such as polltc and tc-graph.pl. They generate graphs. These graphs are updated every 10 seconds. They have been saved on the firewall it self. To view thsese graphs, I have to enable apache on firewall it self. But I do not need to run apache on firewall as I will have to open port 80. I only have opened port 22 to the WORLD. I want to go that way.
I have a web server running CentOS 4.4 @ LAN. I can view those graphs via this web server , if I can mount those graphs to this web server.
my firewall has 3 nics. eth2 is 192.168.101.254 connected to the LAN. my web server @ LAN is 192.168.101.35
How can I achieve this ?
Hope to hear from you.
On Wednesday 19 September 2007 06:34:58 Indunil Jayasooriya wrote:
Some ideas comes to my mind: - export folder containing graphs via NSF on desired net interface, but IMHO it's bit over the top. - look at running httpd only on internal interface (but that would limit access to the graphs to your LAN only) - use rsync But to keep security tight I would simply schedule cron job transfering those files to web server.
Regards,
On 9/19/07, Tomasz Napierała zen@allegro.pl wrote:
I think I expect something like exporting folder containing graphs via NSF.
I have never used NSF. I think it may be someting easy.
below is the location of graphs (these graphs are on my firewall - ip is 192.168.101.254 ) i want to export it to webserver @ 192.168.101.35
/opt/polltc/polltc-1.05/eth1-1-tc.png /opt/polltc/polltc-1.05/eth1-24-tc.png
can U help me for the above.
- look at running httpd only on internal interface (but that would limit
access to the graphs to your LAN only)
I also thoght it. Then, World can not see this.
- use rsync
I thought this one as well. garphs are upated every 10 seconds. cronjob is not so helpful.
On Wednesday 19 September 2007 09:22:49 Indunil Jayasooriya wrote: [snip]
As you wish ;) On the server (firewall in your case) edit /etc/exports and add: /opt/polltc/polltc-1.05/ 192.168.101.35(ro)
(ro) will prevent NFS clients from writing to that location at server level
On the client (webserver) simply add similar line to /etc/fstab 192.168.101.254:/opt/polltc/polltc-1.05/ /graphs nfs defaults 0 0
/graphs must exist on clinet machine. Then point youd httpd to /graphs.
[snip]
Regards,
I have never used NSF. I think it may be someting easy.>
YES, I did it.
(ro) will prevent NFS clients from writing to that location at server level
On the client (webserver) simply add similar line to /etc/fstab
192.168.101.254:/opt/polltc/polltc-1.05/ /graphs nfs defaults 0 0
YES, I did it.
/graphs must exist on clinet machine. Then point youd httpd to /graphs.
YES, I created it as below
[root@host ~]# mkdir /graphs
Now, The question is how to mount it. Do i need to reboot both machines?
Or without rebooting, How to get it worked.
On Wednesday 19 September 2007 09:54:42 Indunil Jayasooriya wrote:
Now, The question is how to mount it. Do i need to reboot both machines?
Or without rebooting, How to get it worked.
No reboot needed, it's Linux. You can easily convert fstab entry to mount arguments: mount -t nfs 192.168.101.254:/opt/polltc/polltc-1.05/ /graphs
Regards,
-
Indunil Jayasooriya -
Tomasz Napierała