Re: How to configure / disable / enable a specific single VRRP instance
barak adam <[email protected]> Mon, 23 Jan 2017 21:36:03 +0200
| Newsgroups | gmane.linux.keepalived.devel |
|---|---|
| Message-ID | <CAAme7o=LXbx8M+aMi86CUS7Ua0CDowbvYWRfqeh528vW8BcKxg@mail.gmail.com> |
Dear Paul, I'm sorry for asking again, but using a check script for each VRRP instance I'd like to enable/disable seems inefficient to me. In addition I don't like my own suggestion of removing / adding the complete instance from the config file. Any other simple idea ? Thanks! Barak On Tue, Jan 17, 2017 at 6:50 PM, Paul Robert Marino <[email protected]> wrote: > dont set it to 0 in the config use a vrrp check script to do it. > > On Tue, Jan 17, 2017 at 9:34 AM, barak adam <[email protected]> wrote: > >> Dear Paul >> >> Unfortunately set the priority to '0', didn't cause a VRRP instance to go >> into FAULT state, but caused the priority to have a default value of 100. >> Unless I will have some other 'trick', I'll just add/remove a VRRP >> instance in/out of the configuration file in order to totally >> enable/disable an instance. >> (I've also thought of using a check script that will return KO for >> disabling and OK for enabling, but it seems to me inefficient and make no >> sense to do it that way instead of just add/remove it out of the config >> file). >> >> Thanks, >> Barak >> >> >> On Thu, Jan 12, 2017 at 6:32 AM, barak adam <[email protected]> wrote: >> >>> Many thanks for your detailed explanation about the Keepalived states. >>> -- To be on the safe side, I will remove this option from the >>> configuration file on production. >>> -- I will use the priority settings "enable" or "disable" a node... >>> >>> Thanks again >>> Barak >>> >>> On Tue, Jan 10, 2017 at 5:33 PM, <[email protected]> wrote: >>> >>>> That's an interesting question, because it has an answer you wouldn't >>>> expect. >>>> The name of the STATE parameter is a little misleading because it is >>>> overridden by the checks and VRRP elections. AssumedState would probably be >>>> a better name for it. >>>> In production you should always have the state parameter set to BACKUP >>>> on all nodes and allow VRRP elections to decide the state or you will get >>>> strange behavior on failovers (most commonly what I call the VIP YoYo >>>> effect where the VIP fails over where a node declaires itself MASTER in a >>>> heartbeat, takes over the VIP, then imitated the VIP goes back to where it >>>> was less than a second later due to the results of an election), in fact I >>>> believe it should be removed from the configuration entirely or at least >>>> ignored unless it's started in some sort of debuging mode. The state >>>> parameter is useful for testing election logic but not for any thing else, >>>> and can be very harmful if set by a user who doesn't know how it actually >>>> works. In template driven tools I've written in the past to manage >>>> keepalived configurations, I've always hidden that option from the user. >>>> Most switches I've seen do not present the option either because it can >>>> become a major support issue. I don't think the writers of the RFC ever >>>> intended any implementation to present it as a user configurable option >>>> either. >>>> >>>> Instead what you should use is a VRRP check script and have it drop the >>>> priority by more than 50 ( - recommend 50 + nodes count +1) on failure. >>>> The reason for this is that a differential of more than 50 in the priority >>>> of a node forces that node to backup regardless of the nopreempt option. >>>> Also a priority of 0 is a FAULT state in VRRP. This is all very clearly >>>> layed out in the RFC's which describe VRRP. >>>> >>>> *From: *barak adam >>>> *Sent: *Tuesday, January 10, 2017 09:22 >>>> *To: *[email protected] >>>> *Cc: *[email protected] >>>> *Subject: *Re: [Keepalived-devel] How to configure / disable / enable >>>> a specific single VRRP instance >>>> >>>> 1) Regarding the exception you have mentioned of reload the master >>>> first for adds and the backup first for removes - I am wondering how can I >>>> control it while programming our router SW? I mean, I can't force / control >>>> a user to make a reload on another router in case my router should not be >>>> the first... >>>> 2) Anyway, I am still not sure how to disable a specific virtual router >>>> instance. Simply set its state to FAULT in the config file and reload >>>> (pkill -HUP)? >>>> >>>> Thanks! >>>> Barak >>>> >>>> On Tue, Jan 10, 2017 at 2:23 PM, <[email protected]> wrote: >>>> >>>>> Send the keepalived process a HUP signal that will reload the >>>>> configuration, and in most cases will not effect the state. >>>>> " >>>>> pkill -HUP keepalived >>>>> " >>>>> The exception is when you add or remove items from a group such as a >>>>> VRRP group (multiple VRRP instances that failover together) you have to be >>>>> careful about the order in which you reload nodes or you can cause an >>>>> accidental failover. On adds always reload the master node first, on >>>>> removes always reload the backup node first >>>>> >>>>> *From: *barak adam >>>>> *Sent: *Tuesday, January 10, 2017 03:11 >>>>> *To: *[email protected] >>>>> *Subject: *[Keepalived-devel] How to configure / disable / enable a >>>>> specific single VRRP instance >>>>> >>>>> Guys, >>>>> >>>>> My question is on VRRP only. >>>>> >>>>> How can I set the configuration file and reload it, so it will affect >>>>> only one VRRP instance and without affecting the other running VRRP >>>>> instances ? >>>>> >>>>> Does any Keepalived configuration reloading affect all instances ? >>>>> >>>>> Thanks! >>>>> Barak >>>>> >>>>> >>>> >>>> >>> >> > ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Keepalived-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/keepalived-devel