Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Thu Oct 09, 2014 12:02 am 
Offline
Newbie

Joined: Thu Jun 12, 2014 2:10 pm
Posts: 2
Hi,
it might be a silly question, and I think the correct answer is to forwarding all data to gateway, right?
The problem is...how do I find the gateway IP for static networking?
I followed the static networking configuration tutorial, but what it's using is the gateway for public IPs. In my setup, I disabled the public IP and use static IP only so the internal DB server won't have to worry about the public internet, but it still needs to talk to public internet when running something like "yum update" or installing some tools. Since I disabled the public IP, it's impossible to use the public gateway for routing purpose.

Any hint? Thanks.

btw, the output from netstat is:

Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.128.0 0.0.0.0 255.255.128.0 U 0 0 0 eth0


Top
   
PostPosted: Thu Oct 09, 2014 7:05 am 
Offline
Senior Member
User avatar

Joined: Sat Aug 30, 2008 1:55 pm
Posts: 1739
Location: Rochester, New York
There is no default gateway for the RFC 1918 space. You need a publicly routable IP address if you're going to route to the public IP network.

_________________
Code:
/* TODO: need to add signature to posts */


Top
   
PostPosted: Thu Oct 09, 2014 8:37 am 
Offline
Senior Member

Joined: Fri Jan 09, 2009 5:32 pm
Posts: 634
I see 2 main options:
1. bring up the public IP whenever you need it for patching, etc (script bringing it up and down)
2. just leave the public IP up, firewall everything inbound and have the DB server only bind to the private IP


Top
   
PostPosted: Thu Oct 09, 2014 12:10 pm 
Offline
Senior Member
User avatar

Joined: Sun Dec 27, 2009 11:12 pm
Posts: 1038
Location: Colorado, USA
glg wrote:
2. just leave the public IP up, firewall everything inbound and have the DB server only bind to the private IP

This is probably the best and easiest to manage setup.

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group