diff options
-rw-r--r-- | doc/book-enea-nfv-access-getting-started/doc/advanced_configurations.xml | 65 |
1 files changed, 33 insertions, 32 deletions
diff --git a/doc/book-enea-nfv-access-getting-started/doc/advanced_configurations.xml b/doc/book-enea-nfv-access-getting-started/doc/advanced_configurations.xml index c85f30d..2a479b9 100644 --- a/doc/book-enea-nfv-access-getting-started/doc/advanced_configurations.xml +++ b/doc/book-enea-nfv-access-getting-started/doc/advanced_configurations.xml | |||
@@ -440,22 +440,21 @@ node0.1048576kB = 3 </programlisting> | |||
440 | </figure> | 440 | </figure> |
441 | 441 | ||
442 | <para>The setup consists of two sub-clusters, placed in different | 442 | <para>The setup consists of two sub-clusters, placed in different |
443 | geographical locations. Each sub-cluster contains three MariaDB servers, | 443 | geographical locations, each consisting of three MariaDB servers. In this |
444 | thus avoiding the split-brain problem. In this example, two of the | 444 | example, two of the machines are running only MariaDB, while the rest are |
445 | machines are running only MariaDB, while the rest are hosting a MariaDB | 445 | hosting a MariaDB server and an Enea uCPE Manager instance. The entire |
446 | server and an Enea uCPE Manager instance. The entire network is hidden behind a | 446 | network is hidden behind a firewall that performs NAT. While in protection |
447 | firewall that performs NAT. While in protection (cluster) mode, the | 447 | (cluster) mode, the Enea uCPE Manager instances promote a Virtual IP (VIP) |
448 | Enea uCPE Manager instances promote a Virtual IP (VIP) that represents the IP address of the | 448 | that represents the IP address of the entire cluster. The firewall in this |
449 | entire cluster. The firewall in this case will allocate a public IP for | 449 | case will allocate a public IP for the outside world that will be |
450 | the outside world that will be translated into the VIP. Also in this | 450 | translated into the VIP. Also in this example, the traffic towards the |
451 | example, the traffic towards the cluster from outside the firewall is done | 451 | cluster from outside the firewall is done through HTTPS, which will be |
452 | through HTTPS, which will be translated to HTTP inside the private | 452 | translated to HTTP inside the private network.</para> |
453 | network.</para> | ||
454 | 453 | ||
455 | <note> | 454 | <note> |
456 | <para>By default, communication to the Enea uCPE Manager is done with HTTPS. | 455 | <para>By default, communication to the Enea uCPE Manager is done with |
457 | To enable HTTP, go to <emphasis role="bold">System</emphasis>, <emphasis | 456 | HTTPS. To enable HTTP, go to <emphasis role="bold">System</emphasis>, |
458 | role="bold">Configuration</emphasis>, click on the <emphasis | 457 | <emphasis role="bold">Configuration</emphasis>, click on the <emphasis |
459 | role="bold">Web Access</emphasis> tab and check the <emphasis | 458 | role="bold">Web Access</emphasis> tab and check the <emphasis |
460 | role="bold">Enable HTTP</emphasis> checkbox.</para> | 459 | role="bold">Enable HTTP</emphasis> checkbox.</para> |
461 | </note> | 460 | </note> |
@@ -510,11 +509,11 @@ node0.1048576kB = 3 </programlisting> | |||
510 | 509 | ||
511 | <para>Please refer to <olink | 510 | <para>Please refer to <olink |
512 | targetdoc="book_enea_nfv_access_getting_started" | 511 | targetdoc="book_enea_nfv_access_getting_started" |
513 | targetptr="firewall_config">Firewall Configuration in the | 512 | targetptr="firewall_config">Firewall Configuration in the <ns:include |
514 | <ns:include href="../../s_docbuild/olinkdb/pardoc-names.xml" | 513 | href="../../s_docbuild/olinkdb/pardoc-names.xml" |
515 | xmlns:ns="http://www.w3.org/2001/XInclude" | 514 | xmlns:ns="http://www.w3.org/2001/XInclude" |
516 | xpointer="element(book_enea_nfv_access_getting_started/1)" /></olink> Manual. | 515 | xpointer="element(book_enea_nfv_access_getting_started/1)" /></olink> |
517 | In addition, the following configuration is needed:</para> | 516 | Manual. In addition, the following configuration is needed:</para> |
518 | 517 | ||
519 | <orderedlist> | 518 | <orderedlist> |
520 | <listitem> | 519 | <listitem> |
@@ -535,7 +534,7 @@ SELINUXTYPE=targeted</programlisting> | |||
535 | 534 | ||
536 | <para>The following ports should be opened in the local firewall (not | 535 | <para>The following ports should be opened in the local firewall (not |
537 | the one doing NAT), for each Enea uCPE Manager machine:</para> | 536 | the one doing NAT), for each Enea uCPE Manager machine:</para> |
538 | 537 | ||
539 | <table> | 538 | <table> |
540 | <title>Ports for Enea uCPE Manager Machines</title> | 539 | <title>Ports for Enea uCPE Manager Machines</title> |
541 | 540 | ||
@@ -717,10 +716,10 @@ gpgcheck=1 | |||
717 | </programlisting></para> | 716 | </programlisting></para> |
718 | 717 | ||
719 | <note> | 718 | <note> |
720 | <para>For more information about setting the repository, | 719 | <para>For more information about setting the repository, consult |
721 | consult <ulink | 720 | <ulink |
722 | url="https://downloads.mariadb.org/mariadb/repositories/#mirror=nxtHost">Downloads | 721 | url="https://downloads.mariadb.org/mariadb/repositories/#mirror=nxtHost">Downloads |
723 | - Setting up MariaDB Repositories</ulink>.</para> | 722 | - Setting up MariaDB Repositories</ulink>.</para> |
724 | </note> | 723 | </note> |
725 | </listitem> | 724 | </listitem> |
726 | 725 | ||
@@ -745,8 +744,8 @@ galera-4-26.4.6-1.el7.centos.x86_64</programlisting> | |||
745 | </listitem> | 744 | </listitem> |
746 | 745 | ||
747 | <listitem> | 746 | <listitem> |
748 | <para>Change the following configuration in | 747 | <para>Change the following configuration in |
749 | <filename>/etc/my.cnf.d/wsrep.cnf</filename>:</para> | 748 | <filename>/etc/my.cnf.d/wsrep.cnf</filename>:</para> |
750 | 749 | ||
751 | <programlisting># Full path to wsrep provider library or 'none' | 750 | <programlisting># Full path to wsrep provider library or 'none' |
752 | <emphasis role="bold">wsrep_provider=/usr/lib64/galera-4/libgalera_smm.so</emphasis> | 751 | <emphasis role="bold">wsrep_provider=/usr/lib64/galera-4/libgalera_smm.so</emphasis> |
@@ -877,11 +876,12 @@ TO 'enea'@'%' IDENTIFIED BY 'somepassword' WITH GRANT OPTION;</programlisting> | |||
877 | PostgreSQL in the <ns:include | 876 | PostgreSQL in the <ns:include |
878 | href="../../s_docbuild/olinkdb/pardoc-names.xml" | 877 | href="../../s_docbuild/olinkdb/pardoc-names.xml" |
879 | xmlns:ns="http://www.w3.org/2001/XInclude" | 878 | xmlns:ns="http://www.w3.org/2001/XInclude" |
880 | xpointer="element(book_enea_nfv_access_getting_started/1)" /></olink> | 879 | xpointer="element(book_enea_nfv_access_getting_started/1)" /></olink> |
881 | Manual, for details on how to install and configure Java OpenJDK.</para> | 880 | Manual, for details on how to install and configure Java |
882 | 881 | OpenJDK.</para> | |
883 | <para>Make sure the <literal>JAVA_HOME</literal> variable points to the | 882 | |
884 | OpenJDK 11 installation:</para> | 883 | <para>Make sure the <literal>JAVA_HOME</literal> variable points to |
884 | the OpenJDK 11 installation:</para> | ||
885 | 885 | ||
886 | <programlisting>[root@localhost ~]# echo $JAVA_HOME | 886 | <programlisting>[root@localhost ~]# echo $JAVA_HOME |
887 | /usr/lib/jvm/java-11-openjdk-11.0.10.0.9-0.el7_9.x86_64 | 887 | /usr/lib/jvm/java-11-openjdk-11.0.10.0.9-0.el7_9.x86_64 |
@@ -893,8 +893,9 @@ TO 'enea'@'%' IDENTIFIED BY 'somepassword' WITH GRANT OPTION;</programlisting> | |||
893 | mode</title> | 893 | mode</title> |
894 | 894 | ||
895 | <para>These steps must be taken on each of the CentOS 7 machines that | 895 | <para>These steps must be taken on each of the CentOS 7 machines that |
896 | will host the Enea uCPE Manager. The Enea uCPE Manager will be installed | 896 | will host the Enea uCPE Manager. The Enea uCPE Manager will be |
897 | and the setup for the external database cluster will be prepared.</para> | 897 | installed and the setup for the external database cluster will be |
898 | prepared.</para> | ||
898 | 899 | ||
899 | <para>As the root user, go to the distribution folder of the Enea uCPE | 900 | <para>As the root user, go to the distribution folder of the Enea uCPE |
900 | Manager, and run:</para> | 901 | Manager, and run:</para> |