[heroes] still not getting a database connection from forum to galera
# tcpdump -n -i eth0 host 192.168.47.76 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes 08:01:59.034878 IP 192.168.47.76.52404 > 192.168.47.18.3306: Flags [S], seq 2026227506, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 9], length 0 08:02:00.052072 IP 192.168.47.76.52404 > 192.168.47.18.3306: Flags [S], seq 2026227506, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 9], length 0 08:02:02.068117 IP 192.168.47.76.52404 > 192.168.47.18.3306: Flags [S], seq 2026227506, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 9], length 0 08:02:04.148146 ARP, Request who-has 192.168.47.18 tell 192.168.47.76, length 42 08:02:04.148180 ARP, Reply 192.168.47.18 is-at 52:54:00:79:69:30, length 28 08:02:06.196144 IP 192.168.47.76.52404 > 192.168.47.18.3306: Flags [S], seq 2026227506, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 9], length 0 08:02:14.388200 IP 192.168.47.76.52404 > 192.168.47.18.3306: Flags [S], seq 2026227506, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 9], length 0 Is there anything in the mysql/galera setup that prevents it talking to forum.o.o ? -- Per Jessen, Zürich (3.5°C) Member, openSUSE Heroes -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org
On Fri, 28 Feb 2020 09:03:44 +0100 Per Jessen
# tcpdump -n -i eth0 host 192.168.47.76
Is there anything in the mysql/galera setup that prevents it talking to forum.o.o ?
Yes: the firewall on the cluster nodes. Why? By intention ;-) Please do NOT use a single node out of a cluster. Just use the proxy in front of the cluster, which will automatically switch, if a node is unreachable/down. For historic reasons (the original databases where on another network), we currently also don't use the standard port... So please either use mysql.infra.opensuse.org port 3307 or (if you want to avoid DNS roundtrips), use 192.168.47.4:3307 Note: if your application supports read-only/load-balanced database access, you can help load-balancing by using 192.168.47.4:3308 in addition. Note: while Galera allows to have all nodes writing to the database (and replications happens between them), they still recommend to use mainly one galera node for writes and the other ones for read. This makes sure everything is consistent (not trapping in a replication error) while it allows load-balancing. That's why the firewall on the nodes only allow the (redundant) proxy server to talk to them. Just have a look at the graphic at: https://jeffatechsteps.blog/blog/linux-setting-up-a-mariadb-galera-cluster/ to get the idea. Regards, Lars -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org
participants (2)
-
Lars Vogdt -
Per Jessen