Task #4476
closed
Upgrade #4319: D4Science Infrastructure Upgrade to gCube 4.0
Upgrade #4327: D4Science Gateways upgrade to gCube 4.0
Please create new VM for production HA Proxy and deploy it
Added by Massimiliano Assante almost 9 years ago.
Updated almost 9 years ago.
Category:
System Application
Infrastructure:
Production
Description
Possibly we should have 2 HA Proxys.
Also,
in order to configure the production environment in advance the following domains on research-infrastructures.eu should be created and should point to this HA Proxy:
- i-marine.research-infrastructures.eu
- descramble.research-infrastructures.eu
- services.research-infrastructures.eu
- egip.research-infrastructures.eu
The above domains will be replaced by the production ones (ending d4science.org) the day of gCube 4 rollout
infra-lb.d4science.org: 146.48.122.98
infra-lb1.d4science.org: 146.48.122.115
infra-lb2.d4science.org: 146.48.122.149
- Status changed from New to In Progress
- % Done changed from 0 to 60
- % Done changed from 60 to 80
The two haproxy instances have been configured.
The last missing piece is the software that will handle the HA between the two haproxy. Until then, the 'floating' IP has been manually assigned to infra-lb1.d4science.org.
- Status changed from In Progress to Feedback
- % Done changed from 80 to 100
keepalived is now installed and configured. I tested that it operates correctly.
- Related to Task #4477: Create a new VM for tomcat production cluster added
- Status changed from Feedback to In Progress
please add the following domain just like you added the others:
- sobigdata.research-infrastructures.eu
Also the http call timeout on infra gateways seems to be default one, could you check?
- Status changed from In Progress to Feedback
sobigdata.research-infrastructures.eu added as CNAME, x509 certificate updated with the new alias.
I increased the connect timeout from 5 to 15 seconds.
Please remember that all these domains below, including some others yet to be created (bluebridge.d4science.org smartarea.d4science.org) in a later (but not so later) period will be "moved" to d4science.org so x509 certificate should be ready next week. (we have i-marine.d4science.org, and the others until egip, not sure we have sobigdata.d4science.org)
- i-marine.research-infrastructures.eu
- descramble.research-infrastructures.eu
- services.research-infrastructures.eu
- egip.research-infrastructures.eu
- sobigdata.research-infrastructures.eu
Massimiliano Assante wrote:
Please remember that all these domains below, including some others yet to be created (bluebridge.d4science.org smartarea.d4science.org) in a later (but not so later) period will be "moved" to d4science.org so x509 certificate should be ready next week. (we have i-marine.d4science.org, and the others until egip, not sure we have sobigdata.d4science.org)
- i-marine.research-infrastructures.eu
- descramble.research-infrastructures.eu
- services.research-infrastructures.eu
- egip.research-infrastructures.eu
- sobigdata.research-infrastructures.eu
The certificates will be automatically requested as soon as the names will be moved from the old IP addresses to the new one. The procedure is completely automated and they are issued within seconds. The only constraint is the DNS refresh time.
- Status changed from Feedback to In Progress
We need to workaround a problem with the liferay clustering. We are exploiting the weight option on the haproxy backend servers to exclude one of the two instances from the round robin.
Done, both for the preproduction and the production environments.
- Status changed from In Progress to Feedback
- Status changed from Feedback to Closed
Also available in: Atom
PDF
Updated by 
Updated by 
