Re: [ClusterLabs] Lost access with the volume while ZFS and other resources migrate to other node (reset VM)

[Vladislav Bogdanov]

Please find attached.
I use it the following way:

primitive vip-10-5-4-235 ocf:my-org:IPaddr2 \
        params ip="10.5.4.235" cidr_netmask="24" \
        op start interval="0" timeout="20" \
        op stop interval="0" timeout="20" \
        op monitor interval="30" timeout="20"
primitive vip-10-5-4-235-fw ocf:my-org:VIPfirewall \
        params vip="10.5.4.235" allow_action="pass" \
        input_chain="_ISCSI_INPUT" output_chain="_ISCSI_OUTPUT" \
        op start interval="0" timeout="30" \
        op stop interval="0" timeout="60" \
        op monitor interval="30" timeout="10" role="Master" \
        op monitor interval="15" timeout="10" role="Slave"
primitive vip-10-5-4-236 ocf:my-org:IPaddr2 \
        params ip="10.5.4.236" cidr_netmask="24" \
        op start interval="0" timeout="20" \
        op stop interval="0" timeout="20" \
        op monitor interval="30" timeout="20"
primitive vip-10-5-4-236-fw ocf:my-org:VIPfirewall \
        params vip="10.5.4.236" allow_action="pass" \
        input_chain="_ISCSI_INPUT" output_chain="_ISCSI_OUTPUT" \
        op start interval="0" timeout="30" \
        op stop interval="0" timeout="60" \
        op monitor interval="30" timeout="10" role="Master" \
        op monitor interval="15" timeout="10" role="Slave"
group c01-pool-0-iscsi-vips vip-10-5-4-235 vip-10-5-4-236
group c01-pool-0-iscsi-vips-fw vip-10-5-4-235-fw vip-10-5-4-236-fw
ms ms-c01-pool-0-iscsi-vips-fw c01-pool-0-iscsi-vips-fw \
        meta master-max="1" master-node-max="1" clone-max="2" \
        clone-node-max="1" notify="false" interleave="true" \
        target-role="Master"
colocation c01-pool-0-iscsi-vips-fw-with-vips inf: \
        ms-c01-pool-0-iscsi-vips-fw:Master \
        c01-pool-0-iscsi-vips:Started
order c01-pool-0-iscsi-vips-fw-after-target inf: iscsi-export:start \
        ms-c01-pool-0-iscsi-vips-fw:promote
order c01-pool-0-iscsi-vips-fw-after-vips inf: \
        c01-pool-0-iscsi-vips:start \
        ms-c01-pool-0-iscsi-vips-fw:promote

On Wed, 2023-04-05 at 07:17 +0300, Александр via Users wrote:
> What is this agent? For iscsitarget, I only found portblock RA, in
> the linstor manual. Can you share the agent and setup instructions?>
> Среда, 5 апреля 2023, 6:09 +10:00 от Vladislav Bogdanov
> <bub...@hoster-ok.com>:
> >  
> > I know that uscsi initiators are very sensible to connection drops.
> > That's why in all my setups with iscsi I use a special m/s resource
> > agent which in a slave mode drops all packets to/from portals. That
> > prevents initiators from receiving FIN packets from the target when
> > it migrates, and they usually behave much better. I can share that
> > RA and setup instructions if that is interesting to someone.
>  
>  
> --
> С уважением,
> Александр Волков
>  
> _______________________________________________
> Manage your subscription:
> https://lists.clusterlabs.org/mailman/listinfo/users
> 
> ClusterLabs home: https://www.clusterlabs.org/

VIPfirewall
Description: application/shellscript

_______________________________________________
Manage your subscription:
https://lists.clusterlabs.org/mailman/listinfo/users

ClusterLabs home: https://www.clusterlabs.org/