Cluster I/O Protocols (CIP) Configuration and Management Manual (H06.16+, J06.05+)

The following assumptions relate to CIP iptables/ip6tables support:
• You must not execute the Linux native iptables/ip6tables commands directly.
• You should not edit any configuration files on the CLIM.
• You should invoke the climconfig commands provided for iptables/ip6tables support on the
CLIM, either through CLIMCMD or Nonstop I/O Essentials to configure and control
iptables/ip6tables.
• Automatic failover of iptables/ip6tables rules is not supported. Similar to IPSec rules, you
have to pre-configure the failover CLIM’s iptables/ip6tables rules in anticipation of a failover.
You can compare the configuration of the home CLIM and failover CLIM by comparing the
–obeyform output of climiptables from each CLIM and ensuring any iptables/ip6tables rules
on the home CLIM exist on the failover CLIM in anticipation of a failover.
The only Linux built-in chain that is supported is the INPUT chain of the ‘filter’ tables. However, you
cannot manage it directly. Instead, use the CIP built-in chain CIP_INPUT as a target for commands
that are intended for the Linux INPUT chain.
The climiptables facility is disabled by default. Before using the facility it must be enabled using
“climconfig climiptables –enable”.
The climiptables are initialized during CLIM start up. At that time, the CIP built-in chains CIP_INPUT
and CIP_INPUT_p are created and the iptables and ip6tables configurations are set in place.
The CIP_INPUT_p chain is used internally for simulating policy setting on the CIP_INPUT chain and
should not be modified directly by the users.
IB CLIM
The IB CLIM is a DL380 G6 server which is used in some of the NonStop BladeSystem configurations
to provide InfiniBand connectivity through dual-port Host Channel Adapter (HCA) InfiniBand
interfaces. The HCA IB interface on the IB CLIM connects to a customer-provided IB switch using
a customer-supplied cable as a part of the Low Latency Solution.
NOTE: IB CLIMs are only used as a Low Latency Solution. They do not provide general purpose
InfiniBand connectivity for the NonStop systems.
The Low Latency Solution architecture provides a high speed and low latency messaging system
for stock exchange trading from the incoming trade server to the NonStop system. The solution
utilizes the third-party Informatica Ultra Messaging Streaming software for messaging and order
sequencing. For information about obtaining the UMS software, contact your service provider.
The Low Latency Solution also requires a customer-supplied IB switch and Subnet Manager software
either installed on the IB switch or running on another server.
Figure 14 DL 380 G6 IB CLIM 2 InfiniBand Interfaces, Three Copper Ethernet Ports
56 Overview