High availability stack #871
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Closed
gsanchietti
force-pushed
the
keepalived
branch
2 times, most recently
from
8416cbc to
82be12e
Compare
gsanchietti
force-pushed
the
keepalived
branch
4 times, most recently
from
8d6f00f to
f6c45c0
Compare
gsanchietti
force-pushed
the
keepalived
branch
4 times, most recently
from
6d9c963 to
964c74d
Compare
filippocarletti
force-pushed
the
keepalived
branch
from
79ba1f0 to
6efe2a1
Compare
gsanchietti
force-pushed
the
keepalived
branch
2 times, most recently
from
fb75a00 to
5d7b9bf
Compare
gsanchietti
force-pushed
the
keepalived
branch
4 times, most recently
from
b250ada to
c0673fe
Compare
Sometime the sysupgrade command returns and errore even if everything goes well.
When checking the remote, parse the response and report back errors on the primary node
Previous implementation was assuming the name of lan and wan device was fixed: this was preventing adding the HA feature on existing firewalls. Now the config script and the API allow a custom interface name for lan and wan. Also please note that wan is not checked on backup node, because the switchover will work as long as the underlaying device of the wan (eg. eth1) is the same on both nodes.
The check on DHCP must be executed only on the provided lan interface: all other interfaces must be ignored.
The ipsec interfaces and routes where not started due to the following issues: - ns-ha-export was running also on backup node - the check to execute ns-ha-enable was always returning false
Previously, after a switch back from backup node to primary node, the ipsec interfaces and routes were disabled.
Manage UI availability
Non-WAN interfaces must be configured in the same way of the main LAN interface: 2 static IPs, plus a virtual IP. Previous configuration was not working with DHCP server. Also fix an issue with MultiWAN: now each WAN is on a separated network to avoid problems with routes.
When removing an interface, move its IP address to the original interface inside the primary node.
If the default certificate is configured to an ACME cert, nginx was not starting because of the missing certificate.
If mwan3 is running during HA configuration, it can mess up the routes
Use a custom ns_macaddr property to set the mac address: the mac is set when the node is master and cleared when the node is backup. Previously, using the macaddr uci option, on physical machine the ethernet could take the primary node mac address on reboot: the backup node was unreachable if the hotspot was configured on a vlan over the main lan interface
Read keepalived status from /tmp/keepalived.json: simpler to parse and do not use /var/log/messages to find current state. To obtain the file, use: kill -37 $(cat /tmp/run/keepalived.pid)
Member
Author
|
Tested and verified both by @filippocarletti and @cotosso |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request includes several changes to the
config/ha.conffile to add new packages and configurations for high availability (HA) support. The most important changes include adding packages for network functionality and keepalived configurations.Added packages:
Current status:
Reset command for development:
See the README for requirements, usage and limitations.
Companion PRs:
Main issue: #920
See also: