Task #4476: Please create new VM for production HA Proxy and deploy it - D4Science Infrastructure - D4science

Actions

Copy link

Task #4476

closed

Upgrade #4319: D4Science Infrastructure Upgrade to gCube 4.0

Upgrade #4327: D4Science Gateways upgrade to gCube 4.0

Please create new VM for production HA Proxy and deploy it

Added by Massimiliano Assante almost 9 years ago. Updated almost 9 years ago.

Status:

Closed

Priority:

High

Assignee:

Andrea Dell'Amico

Category:

System Application

Target version:

D4Science Infrastructure Upgrade to gCube 4.0.0

Start date:

Jun 28, 2016

Due date:

Jul 05, 2016

% Done:

100%

Estimated time:

4.00 h

Infrastructure:

Production

Description

Possibly we should have 2 HA Proxys.

Also,
in order to configure the production environment in advance the following domains on research-infrastructures.eu should be created and should point to this HA Proxy:

i-marine.research-infrastructures.eu
descramble.research-infrastructures.eu
services.research-infrastructures.eu
egip.research-infrastructures.eu

The above domains will be replaced by the production ones (ending d4science.org) the day of gCube 4 rollout

Related issues

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

infra-lb.d4science.org: 146.48.122.98
infra-lb1.d4science.org: 146.48.122.115
infra-lb2.d4science.org: 146.48.122.149

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

Status changed from New to In Progress
% Done changed from 0 to 60

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

% Done changed from 60 to 80

The two haproxy instances have been configured.
The last missing piece is the software that will handle the HA between the two haproxy. Until then, the 'floating' IP has been manually assigned to infra-lb1.d4science.org.

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

Status changed from In Progress to Feedback
% Done changed from 80 to 100

keepalived is now installed and configured. I tested that it operates correctly.

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

Related to Task #4477: Create a new VM for tomcat production cluster added

Actions

Copy link

Updated by Massimiliano Assante almost 9 years ago

Status changed from Feedback to In Progress

please add the following domain just like you added the others:

sobigdata.research-infrastructures.eu

Actions

Copy link

Updated by Massimiliano Assante almost 9 years ago

Also the http call timeout on infra gateways seems to be default one, could you check?

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

Status changed from In Progress to Feedback

sobigdata.research-infrastructures.eu added as CNAME, x509 certificate updated with the new alias.

I increased the connect timeout from 5 to 15 seconds.

Actions

Copy link

Updated by Massimiliano Assante almost 9 years ago

Please remember that all these domains below, including some others yet to be created (bluebridge.d4science.org smartarea.d4science.org) in a later (but not so later) period will be "moved" to d4science.org so x509 certificate should be ready next week. (we have i-marine.d4science.org, and the others until egip, not sure we have sobigdata.d4science.org)

i-marine.research-infrastructures.eu
descramble.research-infrastructures.eu
services.research-infrastructures.eu
egip.research-infrastructures.eu
sobigdata.research-infrastructures.eu

Actions

Copy link

#10

Updated by Andrea Dell'Amico almost 9 years ago

Massimiliano Assante wrote:

Please remember that all these domains below, including some others yet to be created (bluebridge.d4science.org smartarea.d4science.org) in a later (but not so later) period will be "moved" to d4science.org so x509 certificate should be ready next week. (we have i-marine.d4science.org, and the others until egip, not sure we have sobigdata.d4science.org)

i-marine.research-infrastructures.eu

descramble.research-infrastructures.eu

services.research-infrastructures.eu

egip.research-infrastructures.eu

sobigdata.research-infrastructures.eu

The certificates will be automatically requested as soon as the names will be moved from the old IP addresses to the new one. The procedure is completely automated and they are issued within seconds. The only constraint is the DNS refresh time.

Actions

Copy link

#11

Updated by Andrea Dell'Amico almost 9 years ago

Status changed from Feedback to In Progress

We need to workaround a problem with the liferay clustering. We are exploiting the weight option on the haproxy backend servers to exclude one of the two instances from the round robin.

Actions

Copy link

#12