Ask Your Question

Keystone High Availability

asked 2017-11-13 17:25:52 -0500

Mrxlazuardin gravatar image


By reading following URL, I find two ways of HA method for Keystone (Identity) API. by using HAProxy and by using Pacemaker.

Why Keystone is so special so it has/require these two ways? Or, do I miss something here?

Best regards,

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2017-11-13 21:07:24 -0500

updated 2017-11-13 21:09:02 -0500

Keystone is not special compared to other services. When you read on, you will find that the guide also covers pacemaker for Glance and Cinder high-availability. It does leave out Nova and Neutron.

HA-proxy is sufficient to make everything HA (except cinder-volume and nova-consoleauth, which don't support active/active mode).

I believe that the HA guide has never been completed. Consider it a set of suggestions, not a guide that was designed end-to-end. Personally, I am familiar with the HA of Helion OpenStack, which might be a good source of inspiration. See

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools



Asked: 2017-11-13 17:25:52 -0500

Seen: 206 times

Last updated: Nov 13 '17