In order iSCSI to be transparent to the relevant clients, you need to use a
special resource that blocks the iSCSI port during the failover. TCP will
retransmit during the failover and will never receive an error due to the fact
that the VIP is missing.
The name is ocf:heartbeat:portblock that should be defined in the beginning and
end of the resource group. It doesn't work for EL8 systems (or at least it
didn't work for me on Gluster) as they use nftables and iptables translator is
quite limited.
Also, clients that use multipathed iSCSI also need some tuning as the default
120s is not suitable.
Best Regards,Strahil Nikolov
_______________________________________________
Manage your subscription:
https://lists.clusterlabs.org/mailman/listinfo/users
ClusterLabs home: https://www.clusterlabs.org/
