Có nhiều cách khác nhau để cấu hình SR / SC cho các loại hình giao thức mà nó sẽ sử dụng cho phương pháp cũ hơn thành lập bao gồm sử dụng tiêu đề chứng thực (AH) hoặc | High Availability and Clustering Chapter 6 289 Use good fast networking cards 100Mbps Ethernet full duplex or gigabit Ethernet cards in the cluster members. Make sure that surrounding hubs and routers from the origin of the data through to the destination of the data have fast physical networking hardware. These are the key areas that will give you high throughput. Use fast single-processor members in the cluster with lots of memory. Use a load-sharing cluster as opposed to an HA can be shared across the members in the cluster which will give higher data rates of throughput. Keep your Rule Base short and compact. Larger numbers of rules will slow throughput. This applies to NAT rules and the security Rule Base. You need good networking cards and your hubs and routers all the way from data source through the cluster to the data destination need to be as good as you can get. This will define your maximum throughput and it is this line speed that you will aim for. Using fast single-processor members and plenty of memory is good practice. It enables the member in the cluster to deal with highly processor-intensive services such as VPN connections as quickly as possible. Different members in the load-sharing cluster will take different VPN connections between the cluster and the remote sites so this means that one member will not be dealing with all the VPN traffic. If you just have one VPN set up between the cluster and the remote site only one member in the cluster will take the load. If you have several VPNs set up multiple members in the cluster will be dealing with the VPN will be based on the load-sharing algorithm used. In addition if you are using the security servers for passing traffic such as FTP HTTP or Telnet this is load shared across the cluster as well and will also give you efficiencies because it can also be CPU intensive. If you are using security servers make sure that the DNS resolver on each member of the cluster is
