Orion HA in multiple subnets. How to handle the Source IP Address?

On a multi-subnet HA deployment each server would just use their individual IP as their source, there is no VIP moving between them after a failover.  They do trigger a DNS update for the virtual hostname when the failover happens, but if DC1SERVER is active then it will source from the IP on DC1SERVER and when DC2SERVER takes over then traffic will source from that one instead.  All of the HA aspects in this case are handled by DNS.  Since firewalls and most network gear completely ignore DNS you will want to make sure your firewall rules include both servers in all the appropriate directions. 

The other fun challenge is that due to lag in DNS replication and local browsers caching of name resolutions you can have problems where after a failover users can't actually access the GUI again via the DNS name for quite a while after it comes up.  Worst case you can just tell people to open a new browser and magically everything is good again, but that's obviously a less than ideal solution.  I've had to build lots of complicated workarounds for dealing with that with clients in the past.  Things like manually forcing DNS updates on a dozen DNS servers, building scripted tools to update DNS on systems like Infoblox that SW didn't natively support writing changes to.

Thank you very much mesverrum! I was thinking in the same idea, but I guess the better scenario is to have the APEs on the same segment and the Orion Server in different subnets.

In this case only the APEs will poll the network devices.

Ivan