<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div><div>That was me.. </div><div><div id=""><div><div><br></div></div><div>We are using McRouter which then speaks to memcached to talk to all the memcache servers that you have up and running. It keeps track of what is up and down so it knows where to send traffic. You can get pretty complicated with it and we have started to do more complex operations such as warming up cache’s, going across regions to look in that cache for things like tokens, and a few others. </div><div><br></div><div>To start off, you can simple use this configuration [1] which will get you the latest token and update/delete/create to the fastest location. </div><div><br></div><div>I’ve started to write a small blog post about it, but I haven’t finished out the pictures yet. </div><div><br></div><div>Let me know if you have questions though. I’m happy to share more information. </div><div><br></div><div>—Joe</div><div><br></div><div>[1] <a href="https://gist.github.com/RaginBajin/0339436c17e814e16e99">https://gist.github.com/RaginBajin/0339436c17e814e16e99</a></div></div></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Pedro Sousa <<a href="mailto:pgsousa@gmail.com">pgsousa@gmail.com</a>><br><span style="font-weight:bold">Date: </span> Friday, December 18, 2015 at 7:36 AM<br><span style="font-weight:bold">To: </span> "Ajay Kalambur (akalambu)" <<a href="mailto:akalambu@cisco.com">akalambu@cisco.com</a>><br><span style="font-weight:bold">Cc: </span> "<a href="mailto:openstack-operators@lists.openstack.org">openstack-operators@lists.openstack.org</a>" <<a href="mailto:openstack-operators@lists.openstack.org">openstack-operators@lists.openstack.org</a>><br><span style="font-weight:bold">Subject: </span> Re: [Openstack-operators] Keystone token HA<br></div><div><br></div><div><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div><div dir="ltr">Hi Ajay,
<div><br></div><div>someone in this mailing list mentioned mcrouter + memcached to achieve that, I'm also looking to test it soon on my lab.</div><div><br></div><div>Regards,</div><div>Pedro Sousa</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Dec 18, 2015 at 6:48 AM, Ajay Kalambur (akalambu)
<span dir="ltr"><<a href="mailto:akalambu@cisco.com" target="_blank">akalambu@cisco.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:Calibri,sans-serif"><div><div>Hi</div><div>If we deploy Keystone using memcached as token backend we see that bringing down 1 of 3 memcache servers results in some tokens getting invalidated. Does memcached not support replication of tokens</div><div>So if we wanted HA w.r.t keystone tokens should we use SQL backend for tokens?</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>Ajay</div></font></span></div><div><br></div></div><br>
_______________________________________________<br>
OpenStack-operators mailing list<br><a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br><br></blockquote></div><br></div></div></div></span></body></html>