Load balancing Puppet Server

[Joao Morais]

Hello list.

I'm using open source Puppet 3.7.4 with Puppet Server 1.0.2 and I'm evaluating how to load balance two or more Puppet Servers, specially about centralizing the CA. Is the doc http://docs.puppetlabs.com/guides/scaling_multiple_masters.html up to date and is it the way to go? If so, is there a way to "Proxy Certificate Traffic" on Puppet Server just like I'd do with Apache's mod_proxy?

Thanks!

[Stefan Wiederoder]

Hello Joao,

sorry - no help, but I'm also looking for a puppet server 2.x howto about centralizing the CA.
I'm currently using mod_proxy/mod_passenger with an F5 loadbalancer in front of two servers.

I'd be nice if puppetlabs would provide such an howto, it´d help/speedup puppetserver adoption.

bye
,
Stefan

[Christopher Wood]

I presume one of the hosts is still the puppetmaster, I took the tack of using a separate virtual server and pool for the CA. All hosts get catalog requests but all hosts are configured to use the CA virtual server for CA work.

> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [1]puppet-users...@googlegroups.com.
> To view this discussion on the web visit
> [2]https://groups.google.com/d/msgid/puppet-users/ab35abb4-8ede-4376-9629-9a0db83bce5f%40googlegroups.com.
> For more options, visit [3]https://groups.google.com/d/optout.
>
> References
>
> Visible links
> 1. mailto:puppet-users...@googlegroups.com
> 2. https://groups.google.com/d/msgid/puppet-users/ab35abb4-8ede-4376-9629-9a0db83bce5f%40googlegroups.com?utm_medium=email&utm_source=footer
> 3. https://groups.google.com/d/optout

[Thomas Müller]

Am Montag, 11. Mai 2015 18:16:21 UTC+2 schrieb Joao Morais:

Hello list.

I'm using open source Puppet 3.7.4 with Puppet Server 1.0.2 and I'm evaluating how to load balance two or more Puppet Servers, specially about centralizing the CA. Is the doc http://docs.puppetlabs.com/guides/scaling_multiple_masters.html up to date and is it the way to go? If so, is there a way to "Proxy Certificate Traffic" on Puppet Server just like I'd do with Apache's mod_proxy?

if you want that agents only connect to one puppet server you would still need to terminate ssl at another level. IMHO you could use mod_proxy as before.

https://docs.puppetlabs.com/puppetserver/latest/services_master_puppetserver.html#ssl-termination