Task #4476

Upgrade #4319: D4Science Infrastructure Upgrade to gCube 4.0

Upgrade #4327: D4Science Gateways upgrade to gCube 4.0

Please create new VM for production HA Proxy and deploy it

Added by Massimiliano Assante almost 3 years ago. Updated almost 3 years ago.

Status:ClosedStart date:Jun 28, 2016
Priority:HighDue date:Jul 05, 2016
Assignee:Andrea Dell'Amico% Done:

100%

Category:System Application
Sprint:D4Science Infrastructure Upgrade to gCube 4.0.0
Infrastructure:Production
Milestones:
Duration: 6

Description

Possibly we should have 2 HA Proxys.

Also,
in order to configure the production environment in advance the following domains on research-infrastructures.eu should be created and should point to this HA Proxy:

  • i-marine.research-infrastructures.eu
  • descramble.research-infrastructures.eu
  • services.research-infrastructures.eu
  • egip.research-infrastructures.eu

The above domains will be replaced by the production ones (ending d4science.org) the day of gCube 4 rollout


Related issues

Related to D4Science Infrastructure - Task #4477: Create a new VM for tomcat production cluster Closed Jun 28, 2016 Jul 05, 2016

History

#1 Updated by Andrea Dell'Amico almost 3 years ago

infra-lb.d4science.org: 146.48.122.98
infra-lb1.d4science.org: 146.48.122.115
infra-lb2.d4science.org: 146.48.122.149

#2 Updated by Andrea Dell'Amico almost 3 years ago

  • % Done changed from 0 to 60
  • Status changed from New to In Progress

#3 Updated by Andrea Dell'Amico almost 3 years ago

  • % Done changed from 60 to 80

The two haproxy instances have been configured.
The last missing piece is the software that will handle the HA between the two haproxy. Until then, the 'floating' IP has been manually assigned to infra-lb1.d4science.org.

#4 Updated by Andrea Dell'Amico almost 3 years ago

  • % Done changed from 80 to 100
  • Status changed from In Progress to Feedback

keepalived is now installed and configured. I tested that it operates correctly.

#5 Updated by Andrea Dell'Amico almost 3 years ago

  • Related to Task #4477: Create a new VM for tomcat production cluster added

#6 Updated by Massimiliano Assante almost 3 years ago

  • Status changed from Feedback to In Progress

please add the following domain just like you added the others:

  • sobigdata.research-infrastructures.eu

#7 Updated by Massimiliano Assante almost 3 years ago

Also the http call timeout on infra gateways seems to be default one, could you check?

#8 Updated by Andrea Dell'Amico almost 3 years ago

  • Status changed from In Progress to Feedback

sobigdata.research-infrastructures.eu added as CNAME, x509 certificate updated with the new alias.

I increased the connect timeout from 5 to 15 seconds.

#9 Updated by Massimiliano Assante almost 3 years ago

Please remember that all these domains below, including some others yet to be created (bluebridge.d4science.org smartarea.d4science.org) in a later (but not so later) period will be "moved" to d4science.org so x509 certificate should be ready next week. (we have i-marine.d4science.org, and the others until egip, not sure we have sobigdata.d4science.org)

  • i-marine.research-infrastructures.eu
  • descramble.research-infrastructures.eu
  • services.research-infrastructures.eu
  • egip.research-infrastructures.eu
  • sobigdata.research-infrastructures.eu

#10 Updated by Andrea Dell'Amico almost 3 years ago

Massimiliano Assante wrote:

Please remember that all these domains below, including some others yet to be created (bluebridge.d4science.org smartarea.d4science.org) in a later (but not so later) period will be "moved" to d4science.org so x509 certificate should be ready next week. (we have i-marine.d4science.org, and the others until egip, not sure we have sobigdata.d4science.org)

  • i-marine.research-infrastructures.eu
  • descramble.research-infrastructures.eu
  • services.research-infrastructures.eu
  • egip.research-infrastructures.eu
  • sobigdata.research-infrastructures.eu

The certificates will be automatically requested as soon as the names will be moved from the old IP addresses to the new one. The procedure is completely automated and they are issued within seconds. The only constraint is the DNS refresh time.

#11 Updated by Andrea Dell'Amico almost 3 years ago

  • Status changed from Feedback to In Progress

We need to workaround a problem with the liferay clustering. We are exploiting the weight option on the haproxy backend servers to exclude one of the two instances from the round robin.

#12 Updated by Andrea Dell'Amico almost 3 years ago

Done, both for the preproduction and the production environments.

#13 Updated by Andrea Dell'Amico almost 3 years ago

  • Status changed from In Progress to Feedback

#14 Updated by Massimiliano Assante almost 3 years ago

  • Status changed from Feedback to Closed

Also available in: Atom PDF