Task #8752

Task #8750: Create Accounting Service Cluster

HA Proxy Instance for accounting service

Added by Luca Frosini over 2 years ago. Updated over 2 years ago.

Status:ClosedStart date:May 25, 2017
Priority:NormalDue date:Jun 05, 2017
Assignee:_InfraScience Systems Engineer% Done:

100%

Category:Application
Sprint:D4Science Infrastructure Upgrade to gCube 4.5
Infrastructure:Production
Milestones:
Duration: 8

Description

I think we can reuse the VM of accounting-d4s.d4science.org


Related issues

Related to gCube - Task #8758: Modify document-store-persistence-accounting-service to u... Closed May 25, 2017 Jun 16, 2017

History

#1 Updated by Roberto Cirillo over 2 years ago

  • Due date set to Jun 05, 2017

#2 Updated by Roberto Cirillo over 2 years ago

According with our policies we should call it: accounting-service.d4science.org

#3 Updated by Andrea Dell'Amico over 2 years ago

  • Tracker changed from VM Creation to Task

We're going to use the infra load balancer for this service. It has plenty of resources and it's in HA.

#4 Updated by Andrea Dell'Amico over 2 years ago

We need a URL that haproxy can check regularly and very frequently (each second or less) to know the status of the service on every host.

#5 Updated by Luca Frosini over 2 years ago

  • Category set to Application

GET/HEAD /accounting-service/gcube/service/status/getStatus?gcube-token=XXXXXX

#6 Updated by Luca Frosini over 2 years ago

Regarding the token we can generate an application token to be used in all checks.

#7 Updated by Luca Frosini over 2 years ago

@pasquale.pagano@isti.cnr.it what do you think about an application token used by checks

#8 Updated by Pasquale Pagano over 2 years ago

I think that it is the only way to go. We need to register a service endpoint for Nagios. Then we will generate an application token for it. Please notice that the token is per context.

#9 Updated by Andrea Dell'Amico over 2 years ago

We usually use a guest token for this kind of activities. @lucio.lelii@isti.cnr.it is going to look at it

#11 Updated by Andrea Dell'Amico over 2 years ago

  • Status changed from New to In Progress

Done. There's no http -> https redirection. Do we need it?

#12 Updated by Luca Frosini over 2 years ago

I have to change the library to use the HAProxy instead of the Service directly. In the next days I'll do it and I'll configure the connection to haproxy directly to https.
If needed I'll modify the client to support https connection instead of http one.

HAProxy is a transparent proxy, right?

#13 Updated by Andrea Dell'Amico over 2 years ago

  • % Done changed from 0 to 100
  • Status changed from In Progress to Feedback

Luca Frosini wrote:

I have to change the library to use the HAProxy instead of the Service directly. In the next days I'll do it and I'll configure the connection to haproxy directly to https.
If needed I'll modify the client to support https connection instead of http one.

HAProxy is a transparent proxy, right?

Yes.

#14 Updated by Luca Frosini over 2 years ago

  • Related to Task #8758: Modify document-store-persistence-accounting-service to use HTTPS and discover proxy instance first added

#15 Updated by Andrea Dell'Amico over 2 years ago

  • Status changed from Feedback to Closed

Also available in: Atom PDF