Ask Your Question

Keystone High Availability

asked 2017-11-13 17:25:52 -0500

Mrxlazuardin gravatar image


By reading following URL, I find two ways of HA method for Keystone (Identity) API. by using HAProxy and by using Pacemaker.

Why Keystone is so special so it has/require these two ways? Or, do I miss something here?

Best regards,

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted

answered 2017-11-13 21:07:24 -0500

updated 2017-11-13 21:09:02 -0500

Keystone is not special compared to other services. When you read on, you will find that the guide also covers pacemaker for Glance and Cinder high-availability. It does leave out Nova and Neutron.

HA-proxy is sufficient to make everything HA (except cinder-volume and nova-consoleauth, which don't support active/active mode).

I believe that the HA guide has never been completed. Consider it a set of suggestions, not a guide that was designed end-to-end. Personally, I am familiar with the HA of Helion OpenStack, which might be a good source of inspiration. See

edit flag offensive delete link more

answered 2018-05-09 07:56:20 -0500

saiful gravatar image

If our intent to make Openstack dashboard (horizon) highly available to external world, what is recommended configuration of haproxy and what are specific configurations to be supported on haproxy ?

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools



Asked: 2017-11-13 17:25:52 -0500

Seen: 846 times

Last updated: Nov 13 '17