Openstack high avaibilty port dupicate?

asked 2020-03-10 06:04:41 -0500

quanlm gravatar image

I have follow this book: https://docs.huihoo.com/openstack/docs.openstack.org/ha-guide/HAGuide.pdf (https://docs.huihoo.com/openstack/doc...)

And also the docs from openstack: https://docs.openstack.org/ha-guide/control-plane-stateless.html (https://docs.openstack.org/ha-guide/c...)

I encounter problems at Haproxy and Apache service.

I have create VIP using pacemaker + corosync root@controller1:~# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 52:54:00:77:fb:91 brd ff:ff:ff:ff:ff:ff inet 192.168.122.131/24 brd 192.168.122.255 scope global ens3 valid_lft forever preferred_lft forever inet 192.168.122.100/24 brd 192.168.122.255 scope global secondary ens3 valid_lft forever preferred_lft forever 3: ens4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether 52:54:00:7d:f9:49 brd ff:ff:ff:ff:ff:ff

root@controller1:~# netstat -tupln | grep 5000 tcp 0 0 192.168.122.100:5000 0.0.0.0:* LISTEN 14061/haproxy

And the Haproxy bind to VIP port 5000 as you can see, but the apache2 site keystone also use port 5000

root@controller1:~# grep -iR 5000 /etc/apache2/ /etc/apache2/sites-enabled/keystone.conf:Listen 5000 /etc/apache2/sites-enabled/keystone.conf:<VirtualHost *:5000> /etc/apache2/magic:# DEC systems (e.g. DECstation 5000) use a variant of the Sun/NeXT format /etc/apache2/sites-available/keystone.conf:Listen 5000 /etc/apache2/sites-available/keystone.conf:<VirtualHost *:5000>

So i can't put both service work The Haproxy config is like in the book/docs ``` ...

listen keystone_public_internal_cluster bind 192.168.122.100:5000 balance source option tcpka option httpchk option tcplog server controller1 10.0.0.12:5000 check inter 2000 rise 2 fall 5 server controller2 10.0.0.13:5000 check inter 2000 rise 2 fall 5 server controller3 10.0.0.14:5000 check inter 2000 rise 2 fall 5

... ```

So how to fix this problems.

And also another port will be use in the future ?

edit retag flag offensive close merge delete