since setting up the DMZ, I am getting DB connection errors every few hours

[ImAMacGuy]

I setup the JSS to go to the DMZ on a new hostname. It ran fine for several days, but today I came in and i couldn't connect to the dmz host, it reported the MySQL connection couldn't be established. I checked on the mysql server and it looks like it was down. I can get them back up and running if I reboot both servers.

Now, about 2-3 hours later, it did it again... any ideas of what to look for?

[RobertHammen]

Did you move your full JSS to the DMZ, or just a front end Tomcat webapp, leaving MySQL on an internal server?

[ImAMacGuy]

just the front end, limited access jss for computers. tomcat / mysql remain on the internal server.

[bentoms]

@jwojda, is the end goal to have 2 JSS? Or one?

If one, you should cluster the DMZ & internal JSS. But as you said, the JSS URL is off.

Can you possibly create a new JSS with the right URL internally.. Then cluster with the DMZ instance with that.

To migrate clients, on the old JSS push out the quick add from the new. (From recon not enrolment URL).

[ImAMacGuy]

I think i have clustering setup. I only have the main jss and the dmz entry point back to the internal...

it's only got localhost with 5 connections set...i think it was defaults.

[bentoms]

@jwojda, you really need 1 URL for you JSS.

Internally it would resolve to your JSS internally hosted, externally the URL would resolve to your DMZ JSS.

Then the clients will be able to contact the JSS inside & out of your network.