hi Ranjeet
in this page :
https://docs.mirantis.com/openstack/fuel/fuel-6.1/reference-architecture.html#openstack-environment-architecture
it said that :
OpenStack support for multi-node writing to MySQL/Galera nodes is not
production ready yet. "The simplest way to overcome this issue from the
operator’s point of view is to use only one writer node for these types of
transactions". That is why Fuel configures HAProxyfrontend for MySQL/Galera to
use only one active node, while the other nodes in the cluster are retained
standby (passive) state.
my env is centos6.5 and use MariaDB-Galera-server for db
I found that when keystone connected the local db,often encountered the 401
issue.
the keystone.log show the msg:
Invalid user token. Keystone response: {u'error': {u'message': u'The request
you have made requires authentication.', u'code': 401, u'title':
u'Unauthorized'}}
so I changed the keystone's connection to vip:33306 it seems that the issue
solved.
but the keystone connected the vip db,there is another iusse.
poweroff the controller node which hold vip and when poweron it again
it is said that when the vip back to the controller node again the keystone
would lose the connection of db and it need about 10min to recovery
the keystone.log show the msg:
Database server has gone away: (2013, 'Lost connection to MySQL server during
query')
and the cmd like 'nova list' would timeout
I changed the keystone's connection to local db this issue seems solved.
can anyone explain the two issues above ? and which should keystone connect
to,local or vip?
thx.
Keyang Li
[email protected]
From: Ranjeet R
Date: 2015-08-27 01:18
To: [email protected]; dev
Subject: RE: [opencontrail-dev] the mysql cfg in keystone.conf of openstack ha
env set to localhost:3306, why not use vip:33306 ?
Hello Keylang
Keystone being the auth endpoint for all the Openstack components, it accesses
the DB(both reads/writes) more often than other components. Given that, we did
not want to introduce another level of redirection for Keystone token
creation/queries (VIP goes through HAProxy and load balances into a physical
MySQL server) and hence used the localhost for MySQL connection.
It is a small optimization, but if you change the connection parameter to
VIP:33306, it should still work.
Hope that helps!
Ranjeet
From: Dev [mailto:[email protected]] On Behalf Of
[email protected]
Sent: Wednesday, August 26, 2015 1:46 AM
To: dev <[email protected]>
Subject: [opencontrail-dev] the mysql cfg in keystone.conf of openstack ha env
set to localhost:3306, why not use vip:33306 ?
in keystone-server-setup.sh, there are:
if [ "$INTERNAL_VIP" != "none" ]; then
# Openstack HA specific config
openstack-config --set /etc/keystone/keystone.conf sql connection
mysql://keystone:keystone@$CONTROLLER:3306/keystone
else
openstack-config --set /etc/keystone/keystone.conf sql connection
mysql://keystone:[email protected]/keystone
fi
why not use vip:33306 like other component such as nova ?
any help will be appreciated
thx
Keyang Li
[email protected]
_______________________________________________
Dev mailing list
[email protected]
http://lists.opencontrail.org/mailman/listinfo/dev_lists.opencontrail.org