[ClusterLabs] Preventing multiple resources from moving at the same time.

[Strahil Nikolov]

In order iSCSI to be transparent to the relevant clients, you need to use a special resource that blocks the iSCSI port during the failover. TCP will retransmit during the failover and will never receive an error due to the fact that the VIP is missing.
The name is ocf:heartbeat:portblock that should be defined in the beginning and end of the resource group. It doesn't work for EL8 systems (or at least it didn't work for me on Gluster) as they use nftables and iptables translator is quite limited.

Also, clients that use multipathed iSCSI also need some tuning as the default 120s is not suitable.

Best Regards,Strahil Nikolov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clusterlabs.org/pipermail/users/attachments/20210422/3ef59284/attachment.htm>