Deployment Architecture

Automatic procedure to handle 2 active-passive cluster masters

stefano_guidoba
Communicator

Hi,

we're about to deploy a new multi-site Splunk infrastructure.
We're talking of 4 SHs, 40 IDXs, 10 HFWs and 2 cluster (and eventually license) masters (active-passive), divided in 2 sites. Rep and search factors is 3.

Our idea is to propose our customer automatic procedures to recovery from every faulty situation. Particular attention is given to cluster masters. We would like to avoid having 1 SPOF in the cluster master role.
We thought of 2 possibilities, having an active-passive configuration:

  • one DNS CName pointing to both IPs, with priority
  • one LB forwarding requests

Which one could be best in a multi-site environment?
In which flaws/possible issues could we incur?

0 Karma

theunf
Communicator

Stefano,

I´m planning to build a Master HA scenario using Linux HA daemon and rsync of NFS between two nodes.

If your two sites network topology accepts vlan extensions that will work but no need of DNS pointing to
both since all indexers must be on the same master node at the same time.

You can have the IP, which all peers and search heads connects, managed by the HA daemon as an alias
that needs to be Up only before running splunkd on the active Master node.

That should require no change at peers or search heads.

0 Karma

shawngarrettsgp
Path Finder

Greetings theunf,

Curious to hear if you ever got around to implementing your linux ha daemon/rsync idea for cluster masters in a multi-site topology. So far I haven't found any alternatives and wanting to heard how this worked out for you guys over there, thanks.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...