[Openstack-operators] Keystone Configuration in HA: bind_host

Alvise Dorigo alvise.dorigo at pd.infn.it
Thu Mar 6 10:56:58 UTC 2014


On Mar 6, 2014, at 11:06 AM, sylecn wrote:

> Hi Alvise,
> 
> bind_host IP means the api server will only listen for requests to that IP address. You can check it with sudo netstat -ntlp
> 

right.

> bind_host 0.0.0.0 will always work no matter you are configuring for HA or not. Because 0.0.0.0 means listen on all IP on localhost.

Good, I'll use this address.

> bind_host <local_ip> is hardly useful for HA. Because in HA setup, you probably use vip in endpoint registration.
> 

useful but for sure harmless (right?). I've tried both and the API (keystone, nova-api, neutron-server) are still responding correctly.
I'll use definitely 0.0.0.0 for all services.

thanks Sylecn,

	Alvise


> 
> 
> YY Inc. is hiring openstack and python developers. Interested? Check http://www.nsbeta.info/jobs
> 
> --
> Thanks,
> Yuanle
> 
> 
> On Thu, Mar 6, 2014 at 4:16 PM, Alvise Dorigo <alvise.dorigo at pd.infn.it> wrote:
> Hi,
> I've seen around people configuring, for an HA OpenStack installation, for Keystone (and for Glance too) the bind_host variable to local management IP address (which is NOT the Virtual IP of the HA cluster), and other people configuring to 0.0.0.0.
> 
> Which is actually correct (and why?)
> 
> thanks,
> 
> 	Alvise
> 
> 
> 
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20140306/ebf131ef/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1756 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20140306/ebf131ef/attachment.bin>


More information about the OpenStack-operators mailing list