<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hi Folks,</p>
<p>I am installing packmaker to manage the cluster of haproxy within
openstack on ubuntu 16.04.</p>
<p>I met the problem that haproxy can't start listening for some
services in vip because the related ports</p>
<p>were occupied by those native services which listened on 0.0.0.0.
<br>
</p>
<p>I opened a bug to openstack team and a buddy told me that I
should use pacemaker to run haproxy in <br>
</p>
<p>a separate network namespace. I attached his description
here(also in bug):</p>
<div class="boardCommentBody">
<div class="comment-text" itemprop="commentText">
<p><<<</p>
<p>Fuel runs haproxy via pacemaker (not vis systemd/upstart) and
pacemaker runs haproxy in a separate network namespace. <br>
</p>
<p>So haproxy does not cause any problems by listedning on
0.0.0.0 since it's listening in a separate network namespace.
<br>
</p>
<p>You can see it via "ip netns ls" command and then "ip netns
exec haproxy ip a".</p>
<p>Did you try to restart haproxy via systemd/upstart? If so
then you could face this problem. You should use pacemaker to
control haproxy service.</p>
<p>>>></p>
</div>
</div>
<p> </p>
<p>Here is the bug link:<br>
</p>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/openstack-manuals/+bug/1649902">https://bugs.launchpad.net/openstack-manuals/+bug/1649902</a><br>
<p>Actually I did start haproxy with pacemaker but "ip netns ls"
show nothing and haproxy can't bind some port like 9292 on vip .</p>
<p>I checked and found that openstack starts including this function
from fuel 5.0(released in May, 2014).<br>
</p>
<p>But after I downloaded pacemaker's code, did a rough check, I
couldn't find any related functions(keywords: ip netns, clone,
CLONE_NEW...)</p>
<p>except in the test cases for neutron and ovs etc(if my
understanding is correct).</p>
<p>I didn't see any related configuration item in "crm configure
show" either.</p>
<p><br>
</p>
<p>So I would like just to confirm that if pacemaker has such
function to create a new network namespace <br>
</p>
<p>for haproxy(or other manged service) automatically to avoid such
socket binding conflict?<br>
</p>
<p>If yes, how to configure it? If no such function, do you have any
advice on how to solve the problem?</p>
<p>BTW, you can see the detailed configuration information in the
bug link, if you need more, please let me know.<br>
</p>
<p>Thanks a lot!</p>
<p>Regards!<br>
</p>
--
<pre class="moz-signature" cols="72">QingFeng Hao(Robin)</pre>
</body>
</html>