hi Ranjeet

in this page :
https://docs.mirantis.com/openstack/fuel/fuel-6.1/reference-architecture.html#openstack-environment-architecture
 

it said that :
 OpenStack support for multi-node writing to MySQL/Galera nodes is not 
production ready yet. "The simplest way to overcome this issue from the 
operator’s point of view is to use only one writer node for these types of 
transactions". That is why Fuel configures HAProxyfrontend for MySQL/Galera to 
use only one active node, while the other nodes in the cluster are retained 
standby (passive) state.

my env is centos6.5 and use MariaDB-Galera-server for db
I found that when keystone connected the local db,often encountered the 401 
issue.
the keystone.log show the msg:
Invalid user token. Keystone response: {u'error': {u'message': u'The request 
you have made requires authentication.', u'code': 401, u'title': 
u'Unauthorized'}} 
so I changed the keystone's connection to vip:33306 it seems that the issue 
solved.

but the keystone connected the vip db,there is another iusse.
poweroff the controller node which hold vip and when poweron it again
it is said that when the vip back to the controller node again the keystone 
would lose the connection of db and it need about 10min to recovery
the keystone.log show the msg:
Database server has gone away: (2013, 'Lost connection to MySQL server during 
query')
and the cmd like 'nova list' would timeout
I changed the keystone's connection to local db this issue seems solved.

can anyone explain the two issues above ? and which should keystone connect 
to,local or vip? 

thx.

Keyang Li


[email protected]
 
From: Ranjeet R
Date: 2015-08-27 01:18
To: [email protected]; dev
Subject: RE: [opencontrail-dev] the mysql cfg in keystone.conf of openstack ha 
env set to localhost:3306, why not use vip:33306 ?
Hello Keylang
 
Keystone being the auth endpoint for all the Openstack components, it accesses 
the DB(both reads/writes) more often than other components. Given that, we did 
not want to introduce another level of redirection for Keystone token 
creation/queries (VIP goes through HAProxy and load balances into a physical 
MySQL server) and hence used the localhost for MySQL connection.
 
It is a small optimization, but if you change the connection parameter to 
VIP:33306, it should still work.
 
Hope that helps!
Ranjeet
 
From: Dev [mailto:[email protected]] On Behalf Of 
[email protected]
Sent: Wednesday, August 26, 2015 1:46 AM
To: dev <[email protected]>
Subject: [opencontrail-dev] the mysql cfg in keystone.conf of openstack ha env 
set to localhost:3306, why not use vip:33306 ?
 
in keystone-server-setup.sh, there are:
 
if [ "$INTERNAL_VIP" != "none" ]; then 
# Openstack HA specific config 
openstack-config --set /etc/keystone/keystone.conf sql connection 
mysql://keystone:keystone@$CONTROLLER:3306/keystone 
else 
openstack-config --set /etc/keystone/keystone.conf sql connection 
mysql://keystone:[email protected]/keystone 
fi




why not use vip:33306 like other component such as nova ?


any help will be appreciated
thx
 
Keyang Li


[email protected]
_______________________________________________
Dev mailing list
[email protected]
http://lists.opencontrail.org/mailman/listinfo/dev_lists.opencontrail.org

Reply via email to