Project

General

Profile

Actions

Task #8752

closed

Task #8750: Create Accounting Service Cluster

HA Proxy Instance for accounting service

Added by Luca Frosini almost 8 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
_InfraScience Systems Engineer
Category:
Application
Start date:
May 25, 2017
Due date:
Jun 05, 2017
% Done:

100%

Estimated time:
Infrastructure:
Production

Description

I think we can reuse the VM of accounting-d4s.d4science.org

Actions #1

Updated by Roberto Cirillo almost 8 years ago

  • Due date set to Jun 05, 2017
Actions #2

Updated by Roberto Cirillo almost 8 years ago

According with our policies we should call it: accounting-service.d4science.org

Actions #3

Updated by Andrea Dell'Amico almost 8 years ago

  • Tracker changed from VM Creation to Task

We're going to use the infra load balancer for this service. It has plenty of resources and it's in HA.

Actions #4

Updated by Andrea Dell'Amico almost 8 years ago

We need a URL that haproxy can check regularly and very frequently (each second or less) to know the status of the service on every host.

Actions #5

Updated by Luca Frosini almost 8 years ago

  • Category set to Application

GET/HEAD /accounting-service/gcube/service/status/getStatus?gcube-token=XXXXXX

Actions #6

Updated by Luca Frosini almost 8 years ago

Regarding the token we can generate an application token to be used in all checks.

Actions #7

Updated by Luca Frosini almost 8 years ago

@pasquale.pagano@isti.cnr.it what do you think about an application token used by checks

Actions #8

Updated by Pasquale Pagano almost 8 years ago

I think that it is the only way to go. We need to register a service endpoint for Nagios. Then we will generate an application token for it. Please notice that the token is per context.

Actions #9

Updated by Andrea Dell'Amico almost 8 years ago

We usually use a guest token for this kind of activities. @lucio.lelii@isti.cnr.it is going to look at it

Actions #11

Updated by Andrea Dell'Amico almost 8 years ago

  • Status changed from New to In Progress

Done. There's no http -> https redirection. Do we need it?

Actions #12

Updated by Luca Frosini almost 8 years ago

I have to change the library to use the HAProxy instead of the Service directly. In the next days I'll do it and I'll configure the connection to haproxy directly to https.
If needed I'll modify the client to support https connection instead of http one.

HAProxy is a transparent proxy, right?

Actions #13

Updated by Andrea Dell'Amico almost 8 years ago

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100

Luca Frosini wrote:

I have to change the library to use the HAProxy instead of the Service directly. In the next days I'll do it and I'll configure the connection to haproxy directly to https.
If needed I'll modify the client to support https connection instead of http one.

HAProxy is a transparent proxy, right?

Yes.

Actions #15

Updated by Andrea Dell'Amico almost 8 years ago

  • Status changed from Feedback to Closed
Actions

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 8.91 MB)