Ask Your Question
0

Keystone High Availability

asked 2017-11-13 17:25:52 -0600

Mrxlazuardin gravatar image

Hi,

By reading following URL, I find two ways of HA method for Keystone (Identity) API. by using HAProxy and by using Pacemaker.

https://docs.openstack.org/ha-guide/c...

https://docs.openstack.org/ha-guide/c...

Why Keystone is so special so it has/require these two ways? Or, do I miss something here?

Best regards,

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted
0

answered 2018-05-09 07:56:20 -0600

saiful gravatar image

If our intent to make Openstack dashboard (horizon) highly available to external world, what is recommended configuration of haproxy and what are specific configurations to be supported on haproxy ?

edit flag offensive delete link more
0

answered 2017-11-13 21:07:24 -0600

updated 2017-11-13 21:09:02 -0600

Keystone is not special compared to other services. When you read on, you will find that the guide also covers pacemaker for Glance and Cinder high-availability. It does leave out Nova and Neutron.

HA-proxy is sufficient to make everything HA (except cinder-volume and nova-consoleauth, which don't support active/active mode).

I believe that the HA guide has never been completed. Consider it a set of suggestions, not a guide that was designed end-to-end. Personally, I am familiar with the HA of Helion OpenStack, which might be a good source of inspiration. See https://docs.hpcloud.com/hos-5.x/#hel....

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

2 followers

Stats

Asked: 2017-11-13 17:25:52 -0600

Seen: 359 times

Last updated: Nov 13 '17