Hi,

We need to implement a solution in which two Windows 2003/ SQL Servers 2000
based servers being located behind firewalls in two different locations,
together form SAN attached geo-cluster systems. SQL Server ports will be
opened on firewall to DMZ and accessible by Web servers located in DMZ.

There are currently many Active/ Passive SQL Clusters in our LAN which are
geo-cluster and SAN attached. We have infrastructure in place to have 2
redundant public NICs and 2 redundant private non-routable NICs for
heartbeat.

Do we need to open special port(s) opened for Windows/ SQL clustering on the
firewall for this scenario to work properly? Please note heartbeat
connection will not use our internal network.

Thanks
Alex

Alex,

If you run a geo-dispersed cluster, with a firewall in between the two
sites, then you need to create a tunnel/vpn/vlan to ensure the following
three statements for networking
- public cluster network on both sides, for all nodes, need to be in the
same subnet.
- private cluster network on both sides, for all nodes, need to be in the
same subnet.
- ping round trip does not exceed 500ms

Basically all networking statements for a non-geo cluster are true, no
difference for geo-clusters !

keep the best practices in your mind while designing your cluster/network ;
http://technet2.microsoft.com/WindowsServer/en/library/7b1c90d1-877e-4c55-ab8c-9c65101a503d1033.mspx?mfr=true

so, based on what technology (tunnel/vpn/vlan) you are using, that is
determining the firewall configuration.

The above is all you need for cluster networking to be functional.
Additional you might look at what your clients need to connect to your
clustered application. However if they already have access to the
public-cluster-subnet, and if you are "tunneling/vpn-ning/vlan-ning" the
whole subnet accross to both sides... you might not have to change anything
for client access to your application.


Besides the networking you need to ensure your data is replicated, but as
you state that you already running multiple geo-dispersed clusters, I am
assuming you are familiar with this.

HTH,
_Edwin.


[quoted text, click to view]