Page MenuHomePhabricator

have cloud hardware servers in the cloud realm using a dedicated LB layer
Closed, ResolvedPublic

Description

In a meeting on 2021-12-01 we decided to:

  • get a couple new hardware servers (cloudlb?) dual homed (cloud-dedicated VLAN <-> cloud-host vlan, exact details TBD).
  • give them a public IPv4 address. Only 1, for a VIP. This IP is allocated from a cloud-dedicated IPv4 pool/CIDR and it will be associated with the wikimediacloud.org domain.
  • introduce keepalived (VRRP) and haproxy (proxying/loadbalancing) into the new servers
  • have all new services be backends of the above. Initially cloudswift, others likely to follow (cloudcontrol, cloudservices, etc).

We agreed on our next steps being:

  • create a draft with the plans, diagrams and some initial implementation details -- @aborrero to do this
  • iterate over the draft until we feel it sounds like an actual plan --- both WMCS & SRE/IF to iterate over it.
  • once we have a clear picture of what the architecture is and how the service will work, talk to the Traffic SRE team and coordinate with them. --- both WMCS & SRE/IF to participate in this meeting

Details

Related Changes in Gerrit:

Related Objects

StatusSubtypeAssignedTask
ResolvedPapaul
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolvedayounsi
Resolvedcmooney
ResolvedPapaul
Resolvedcmooney
Resolvedcmooney
Resolved aborrero
Resolved aborrero
ResolvedJhancock.wm
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolvedcmooney
Resolved aborrero
Resolved aborrero
InvalidNone
Resolved aborrero
Resolved aborrero
OpenNone
Resolved aborrero
Invalid aborrero
Resolved aborrero
Resolvedfgiunchedi
Resolvedcmooney
ResolvedJhancock.wm
Resolved aborrero
ResolvedAndrew
Resolved aborrero
Resolved aborrero
Resolvedtaavi
Opencmooney
Resolved aborrero
Opencmooney
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolved aborrero
ResolvedAndrew
ResolvedAndrew
ResolvedAndrew
ResolvedAndrew
ResolvedAndrew
ResolvedAndrew
ResolvedAndrew
ResolvedAndrew
Resolved aborrero
ResolvedJhancock.wm
ResolvedJelto
Resolved aborrero
Resolvedtaavi
Resolved aborrero
ResolvedPapaul
Resolved aborrero
InvalidAndrew
Resolvedcmooney
Resolvedcmooney
Resolvedcmooney
OpenAndrew
ResolvedJclark-ctr
ResolvedPapaul
Resolved aborrero
Resolvedtaavi
InvalidNone
ResolvedJclark-ctr
Resolved aborrero
ResolvedRobH
Resolvedfnegri
ResolvedJclark-ctr
Resolvedtaavi
Resolvedtaavi
Resolvedtaavi
Resolvedtaavi
Resolved aborrero
Resolved aborrero
Resolved aborrero
Invalid aborrero
Resolved aborrero
Resolved aborrero
Resolved aborrero
Resolvedtaavi
Resolved aborrero
Resolved aborrero
Resolvedtaavi
ResolvedJclark-ctr
Resolvedtaavi
OpenNone
Resolvedtaavi
OpenNone
Resolvedtaavi
Resolvedtaavi
OpenNone
Resolvedfgiunchedi
Resolvedtaavi
ResolvedAndrew
OpenNone
DeclinedNone
Resolvedtaavi
Resolvedtaavi
Resolvedjbond

Event Timeline

aborrero changed the task status from Open to Stalled.Dec 13 2021, 12:39 PM
aborrero triaged this task as Medium priority.

Marking this as blocked by T297587: PoC: have cloud hardware servers to the cloud realm using neutron VLAN, as they are competing solutions to the same problem, and we're evaluating the other first.

Change 861902 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/puppet@production] openstack: haproxy: introduce hiera config hash

https://gerrit.wikimedia.org/r/861902

Change 861902 merged by Arturo Borrero Gonzalez:

[operations/puppet@production] cloudlb: introduce role skeleton

https://gerrit.wikimedia.org/r/861902

This is completed: we have now the cloudlb systems.