openwisp2 controller works in redundancy

[mateus...@gmail.com]

Hello,

is it possible to configure two virtual machines with openwisp2 controller and make them work in redundancy to manage access points with OpenWRT?

Thank you.

[Federico Capoano]

Hi Mateus,

the first 2 ways that come to my mind are the following:

1. different application servers behind an HTTP load balancer, serving requests from the same hostname
2. using different openwisp2 instances which are sharing database and cache, having 2 hostnames, but the OpenWRT agent (openwisp-config) doesn't support multiple URLs, so you'd have to balance things manually

In either case, I'm not sure this setup is not doable with the current ansible-openwisp2 role.

Federico

[mateus...@gmail.com]

Hi Frederico, thanks for replying.
I'm going to use one local openwisp virtual machine and one in the cloud, and I need both of them to work in redundancy, have you ever had a similar experience?
In my infrastructure I use pfsense as a firewall and router, does it work for balancing? or maybe need to use apache or nginx?

thank you so much.

[Артур Скок]

Hello Mateus.

pfSense and nginx support web load balancing.
https://www.howtoforge.com/how-to-use-pfsense-to-load-balance-your-web-servers
http://nginx.org/en/docs/http/load_balancing.html

As Federico said, agents can connect only to one entry point and cannot change this one... without agent's scripts modification.

Second solution: use domain name as entry point and CDN for balancing. This is more universal solution (if your devices intermediate with controller via internet).

In any case, many things depends on your desired result, network architecture and topology.

--
You received this message because you are subscribed to the Google Groups "OpenWISP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openwisp+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Federico Capoano]

Agreed with what Arthur wrote.

Alternatively, we do have an issue to allow openwisp-config to use different URLs (openvpn allows this as well) but nobody is currently working on it: https://github.com/openwisp/openwisp-config/issues/15

Fed

[Артур Скок]

I think i can do it: add url list and design url changing on connection failure.

Also we made very dirty UML scheme of openwisp-config in Visual Paradigm (attachment).

--

[Federico Capoano]

Would be great! 

Could you export it as PNG please?

For the record, here's what I was referring to when mentioning openvpn, see "--remote" and "--remote-random" flags: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage 

[Артур Скок]

PNG version in attach.

Redundancy: you meant to realize same solution for openwisp-config like OpenVPN random server address? With proxy and etc?

--

[Federico Capoano]

mmm the image is not very readable, maybe an SVG would work better?

It'd be cool to have the possibility to specify a list of URLs, as well as an additional option to randomize the order in which the URLs are tried if the administrator deems this useful. I was not thinking about a proxy though, better to keep it simple.

Fed

On Sat, Apr 28, 2018 at 2:30 PM Артур Скок <arthu...@gmail.com> wrote:

PNG version in attach.

Redundancy: you meant to realize same solution for openwisp-config like OpenVPN random server address? With proxy and etc?

2018-04-28 16:57 GMT+05:00 Federico Capoano <federico...@gmail.com>:

Would be great! 

Could you export it as PNG please?

For the record, here's what I was referring to when mentioning openvpn, see "--remote" and "--remote-random" flags: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage 

--
You received this message because you are subscribed to the Google Groups "OpenWISP" group.

To unsubscribe from this group and stop receiving emails from it, send an email to openwisp+u...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "OpenWISP" group.

To unsubscribe from this group and stop receiving emails from it, send an email to openwisp+u...@googlegroups.com.

[BlancLoup]

Hello, Federico.

Sorry for long answer about scheme.

Attach in svg format. But this one is outdated a little bit.