Re: [Veritas-ha] Implementing Solaris(tm) Zones with VCS, any update?
On Mon, Jun 30, 2008 at 08:22:24PM -0400, John Cronin wrote: On 6/30/08, Ceri Davies [EMAIL PROTECTED] wrote: On Thu, Jun 26, 2008 at 03:42:40PM -0300, Rodolfo Bonnin wrote: Hi all, We're implementing a new cluster in zoned Sun equipment, using the mentioned 2006 paper http://eval.symantec.com/mktginfo/enterprise/white_papers/ent-whitepaper_implementing_solaris_zones_06-2007.en-us.pdf , and I'd like to know if there is any differences a VCS 5.0 install and configuration tasks could have in comparison with the original publication, given that it was VCS 4-centric. It depends what you're trying to implement. In my case, waiting for a zone to fail over takes too long so I run identical zones on each node as a parallel resource group, and fail my service groups over between the zones - an online local firm dependency ensures that the target zone is running on a node before the service is attempted to be brought online on any particular node. Just curious - are you using sparse root or full root zones? Full root. We run a wild variety of different ISV-bought apps, each in a different zone, so we needed to be able to fiddle with each zone pretty much independently (although obviously we keep corresponding zones on each node strictly in sync). Ceri -- That must be wonderful! I don't understand it at all. -- Moliere pgpnizoGcoF6n.pgp Description: PGP signature ___ Veritas-ha maillist - Veritas-ha@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-ha
Re: [Veritas-ha] Implementing Solaris(tm) Zones with VCS, any update?
On Tue, Jul 01, 2008 at 10:46:41AM +0100, Ceri Davies wrote: On Mon, Jun 30, 2008 at 08:22:24PM -0400, John Cronin wrote: On 6/30/08, Ceri Davies [EMAIL PROTECTED] wrote: On Thu, Jun 26, 2008 at 03:42:40PM -0300, Rodolfo Bonnin wrote: Hi all, We're implementing a new cluster in zoned Sun equipment, using the mentioned 2006 paper http://eval.symantec.com/mktginfo/enterprise/white_papers/ent-whitepaper_implementing_solaris_zones_06-2007.en-us.pdf , and I'd like to know if there is any differences a VCS 5.0 install and configuration tasks could have in comparison with the original publication, given that it was VCS 4-centric. It depends what you're trying to implement. In my case, waiting for a zone to fail over takes too long so I run identical zones on each node as a parallel resource group, and fail my service groups over between the zones - an online local firm dependency ensures that the target zone is running on a node before the service is attempted to be brought online on any particular node. Just curious - are you using sparse root or full root zones? Full root. We run a wild variety of different ISV-bought apps, each in a different zone, so we needed to be able to fiddle with each zone pretty much independently (although obviously we keep corresponding zones on each node strictly in sync). [Replying again, now that I've scanned the referenced whitepaper [1]] Obviously, using full root and separate zones also allows us to perform patching of zones without any messing about freezing groups or worrying about downing applications - we just patch a zone on one node, fail the application into it, then patch the other side (iterate a little, we have four nodes). One little gotcha is that you have to assign IP addresses to each zone permanently, as otherwise when you fail the logical IP address into the zone, there is no routing table (there are some ways around this, plus Solaris PSARC case 2008/057 Default Route For Zones should fix this whenever it gets putback to Solaris 10). Ceri -- That must be wonderful! I don't understand it at all. -- Moliere pgpf1jV90jVE4.pgp Description: PGP signature ___ Veritas-ha maillist - Veritas-ha@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-ha
Re: [Veritas-ha] Implementing Solaris(tm) Zones with VCS, any update?
On Tue, Jul 01, 2008 at 09:35:29AM -0400, John Cronin wrote: It is the last part of your post that I have found causes the most problems in my experience: the need to propagate changes to all affected zones, in order to keep them identical. Check. It does require rigour. On the other hand, if you apply a patch on one node and not on all others, a zone will generally fail to attach. This same issue has led me to generally prefer putting a single copy of the application binaries and configuration on shared storage, and move it with the apps, rather having a local copy of the binaries and configuration on each node in a cluster. Oh, we do that. It's just the zone root that doesn't fail over; application binaries and configuration (as much as possible) is strictly on shared storage. For those who don't know, full root zones take much longer to boot - similar to a regular server boot. Sparse root zones generally take a few seconds to boot, at most. We don't really see that - a full root zone on our system is normally up within 20 seconds. Either way; in my case I was more concerned with the time it took to shut down a zone before failing it over - this seemed to often take on the order of minutes (particularly under problematic circumstances) which was unacceptable for our environment. Generally, with Solaris zones, patching is the biggest problem. When you are failing the zones around, it adds one more layer of complexity. Agreed; see above note on patching. Ceri -- That must be wonderful! I don't understand it at all. -- Moliere pgpPOPJxC7tfe.pgp Description: PGP signature ___ Veritas-ha maillist - Veritas-ha@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-ha
Re: [Veritas-ha] Implementing Solaris(tm) Zones with VCS, any update?
On Thu, Jun 26, 2008 at 03:42:40PM -0300, Rodolfo Bonnin wrote: Hi all, We're implementing a new cluster in zoned Sun equipment, using the mentioned 2006 paperhttp://eval.symantec.com/mktginfo/enterprise/white_papers/ent-whitepaper_implementing_solaris_zones_06-2007.en-us.pdf, and I'd like to know if there is any differences a VCS 5.0 install and configuration tasks could have in comparison with the original publication, given that it was VCS 4-centric. It depends what you're trying to implement. In my case, waiting for a zone to fail over takes too long so I run identical zones on each node as a parallel resource group, and fail my service groups over between the zones - an online local firm dependency ensures that the target zone is running on a node before the service is attempted to be brought online on any particular node. Ceri -- That must be wonderful! I don't understand it at all. -- Moliere pgp5wRlzxfLeT.pgp Description: PGP signature ___ Veritas-ha maillist - Veritas-ha@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-ha
Re: [Veritas-ha] Implementing Solaris(tm) Zones with VCS, any update?
Just curious - are you using sparse root or full root zones? On 6/30/08, Ceri Davies [EMAIL PROTECTED] wrote: On Thu, Jun 26, 2008 at 03:42:40PM -0300, Rodolfo Bonnin wrote: Hi all, We're implementing a new cluster in zoned Sun equipment, using the mentioned 2006 paper http://eval.symantec.com/mktginfo/enterprise/white_papers/ent-whitepaper_implementing_solaris_zones_06-2007.en-us.pdf , and I'd like to know if there is any differences a VCS 5.0 install and configuration tasks could have in comparison with the original publication, given that it was VCS 4-centric. It depends what you're trying to implement. In my case, waiting for a zone to fail over takes too long so I run identical zones on each node as a parallel resource group, and fail my service groups over between the zones - an online local firm dependency ensures that the target zone is running on a node before the service is attempted to be brought online on any particular node. Ceri -- That must be wonderful! I don't understand it at all. -- Moliere ___ Veritas-ha maillist - Veritas-ha@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-ha ___ Veritas-ha maillist - Veritas-ha@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-ha
Re: [Veritas-ha] Implementing Solaris(tm) Zones with VCS, any update?
The latest version of our zone agent supports zone attach-detach, which isn't reflected in that paper. The essential best practices outlined in that paper, though, remain the same. Eric From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rodolfo Bonnin Sent: Thursday, June 26, 2008 2:43 PM To: Veritas-ha@mailman.eng.auburn.edu Subject: [Veritas-ha] Implementing Solaris(tm) Zones with VCS, any update? Hi all, We're implementing a new cluster in zoned Sun equipment, using the mentioned 2006 paper http://eval.symantec.com/mktginfo/enterprise/white_papers/ent-whitepape r_implementing_solaris_zones_06-2007.en-us.pdf , and I'd like to know if there is any differences a VCS 5.0 install and configuration tasks could have in comparison with the original publication, given that it was VCS 4-centric. Regards, Rodolfo Bonnin. ___ Veritas-ha maillist - Veritas-ha@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-ha
