<div dir="ltr">Hi Emilio,<div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span style="font-family:arial,sans-serif;font-size:13px">you have at least two way:<br>
</span><span style="font-family:arial,sans-serif;font-size:13px">- active-active with the F5 balancing the varnish node (then the varnish will balance the 4 web server directly as backends without the F5)<br></span><span style="font-family:arial,sans-serif;font-size:13px">- active-standby without the F5 and with keepalived on the two varnish node (I have some deployments like this where I also put the two varnish node, with keepalived for the HA, outside the firewall (the firewall may be one of the bottleneck on hi traffic sites)</span></blockquote>
<div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div><div> Thank you, this is great clarification. So it looks like whichever way we go we still need to assign the VIP (10.10.40.42) to the two Varnish nodes, not the web servers! And in any case have Varnish load balance the web servers. Whether we want to setup active/standby with keepalived or active/active with the F5 is something I'll have to talk over with the team. </div>
</div><div><br></div><div>However in the config I've inherited from the other datacenter as I demonstrated the first IP in that config is the VIP. So even tho that's what gave me the idea that the load balancer needs to be looking at the Varnish nodes and not the web servers. But what you're saying is that whether we go active / active we shouldn't define the VIP IP anywhere in the VCL??</div>
<div><br></div><div>That's really the only question I still have. Otherwise I think I have a clear idea of how we should go about this.</div><div><br></div><div>Thanks!</div><div>Tim</div><div><br></div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Mon, Apr 14, 2014 at 4:09 PM, emilio brambilla <span dir="ltr"><<a href="mailto:emilio@antispam.it" target="_blank">emilio@antispam.it</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
hello,<div class=""><br>
<br>
On 2014/04/14 03:21, Tim Dunphy wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Thanks for your input. That was exactly what needed to confirm what I was thinking we'd ought to do. I'm going to go ahead and recommend that we take the web servers out of the vip pool and instead point the vip at the two varnish cache nodes. I'm thinking we'll need a heartbeat established between the two (something like keepalived) to enable the failover so that each node can assume the identity of the VIP ip.<br>
<br>
</blockquote></div>
you have at least two way:<br>
- active-active with the F5 balancing the varnish node (then the varnish will balance the 4 web server directly as backends without the F5)<br>
- active-standby without the F5 and with keepalived on the two varnish node (I have some deployments like this where I also put the two varnish node, with keepalived for the HA, outside the firewall (the firewall may be one of the bottleneck on hi traffic sites)<br>
<br>
of course the active-standby version with keepalived will NOT use the F5 balancer neither in the frontend nor in the backend.<div class=""><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
All I am really still curious about at this point is whether I should post this section on my first node:<br>
<br>
if (req.restarts == 0) {<br>
if (client.ip == "10.10.40.8" || client.ip == "10.10.40.9") {<br>
set req.backend = www;<br>
} elsif (server.ip == "10.10.40.8") {<br>
set req.backend = varnish2;<br>
} else {<br>
set req.backend = varnish1;<br>
}<br>
} elsif (req.restarts >= 2) {<br>
return (pass);<br>
</blockquote></div>
I really cannot undestand this... you will have the same vcl on both the varnish nodes, and you will have 4 backend (the 4 web server) on them the F5 vip and the cache ip shoud NOT be backend on your vcl<div class="HOEnZb">
<div class="h5"><br>
<br>
<br>
<br>
______________________________<u></u>_________________<br>
varnish-misc mailing list<br>
<a href="mailto:varnish-misc@varnish-cache.org" target="_blank">varnish-misc@varnish-cache.org</a><br>
<a href="https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc" target="_blank">https://www.varnish-cache.org/<u></u>lists/mailman/listinfo/<u></u>varnish-misc</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>GPG me!!<br><br>gpg --keyserver <a href="http://pool.sks-keyservers.net" target="_blank">pool.sks-keyservers.net</a> --recv-keys F186197B<br><br>
</div>