Ask Your Question
0

Concept of VIP configuration for HAproxy

asked 2016-07-05 03:30:50 -0500

Albert94 gravatar image

Hello, All. There is some misunderstood for configuring VIPs for OpenStack APIs that confused me:

First of all , is there any hardware dependencies to implement VIP (for example, Enterprise Router ) ??? or any protocol dependencies (for example, VRRP that need external router ) ???

And what is the minimum requirements in lab to implement VIP for HAProxies ?

Best Regards Albert

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2016-07-05 04:45:06 -0500

Hi @Albert94

HAproxy does not need any special hardware to run, you can just simply install in a virtual machine or any server. In order to make it work, you need to install/configure keepalived with a free IP of your network. This IP will be the VIP HAproxy is going to use for listening request and redirect to the proper API endpoint IPs.

When a HAproxy node falls down, keepalived will take about 1-3 seconds (depends of advert_int option) to realize the master node is not working and move the IP to a new master node. Sometimes, your network hardware who provides networking to your infrastructure does not realize when the VIP changed from one node to another.

To avoid this, you have to configure GARP at keepalived side[0]

Resume of requirements for installing/configuring HAproxy:

  • At least 2 servers(physical or virtual).
  • 3 IPs, 2 for the servers and the other for VIP
  • Network connectivity between HAproxys and OpenStack public APIs

For testing purposes you can use only one server for HAproxy, but OpenStack APIs won't have high availability if the HAproxy server falls down.

Regards

[0][https://wiki.wireshark.org/Gratuitous_ARP](https://wiki.wireshark.org/Gratuitous_ARP)

edit flag offensive delete link more

Comments

Thanks Eduardo !! So, Can i install HAProxies on controller nodes ? if possible , how to configure network connection ?

Albert94 gravatar imageAlbert94 ( 2016-07-05 05:00:19 -0500 )edit

You can, but you cannot use the same ports for HAproxy listening and OpenStack services. You cannot bind a port from two different services

Eduardo Gonzalez gravatar imageEduardo Gonzalez ( 2016-07-05 07:02:45 -0500 )edit

So according to your guidance :

  • At least 2 servers(physical or virtual).
  • 3 IPs, 2 for the servers and the other for VIP
  • Network connectivity between HAproxys and OpenStack public APIs

We need two additional HAproxy servers ? Right ?

Albert94 gravatar imageAlbert94 ( 2016-07-09 01:28:19 -0500 )edit

Yes, you can do it with only one. But two is required to provide HA to HAproxy

Eduardo Gonzalez gravatar imageEduardo Gonzalez ( 2016-07-09 03:38:36 -0500 )edit

Thanks Eduardo for your patient :) last questions. how to set vip in these servers ? how to handle IP conflict between servers ?? is there any hardware requirement (router) ?

thanks alot.

Albert94 gravatar imageAlbert94 ( 2016-07-09 05:25:49 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2016-07-05 03:30:50 -0500

Seen: 1,846 times

Last updated: Jul 05 '16