Legacy HA for Avi Service Engines

Beginning in Avi Vantage 16.2, legacy active/standby high availability (HA) is available for Avi Service Engine (SE) redundancy. Legacy active/standby is useful for migrating from hardware appliance-based solutions.

Avi Vantage also provides elastic HA, including active/active and N+M modes.

In legacy HA mode, exactly two Avi SEs are configured. One SE carries all the traffic for a virtual service placed on it, and is thus the active SE for that VS. The other SE in the pair is the standby for that VS, carrying no traffic for it while the other SE is healthy. Upon failure of an SE, the surviving SE takes over traffic for all virtual services previously active on the failed SE, while continuing to handle traffic for virtual services already assigned to it. As part of the takeover process, the survivor also takes ownership of all floating addresses, such as VIPs, SNAT-IP, and so on. Two options, compacted and distributed (figure 1), determine whether all active virtual service placements are concentrated onto one SE in a healthy pair or not.

Starting with release 16.3, Avi Vantage supports rolling upgrades by the Avi Controller of SEs in a legacy HA configuration. Virtual services running on a legacy HA SE group are not disrupted during their upgrade.

Figure 1. Legacy HA active/standby, showing compacted and distributed load options. Standby virtual services are shown in light grey.

Health Monitoring

By default, health checks are sent by both Avi SEs to back-end servers. Optionally, one can disable health monitoring by an SE for virtual services for which it is standing by.

Optionally, health checks for each Avi SE’s next-hop gateways also can be enabled. Gateway health checking is supported for both Avi SEs.

Floating IP Address

Optionally, one or more floating IP addresses can be assigned to an SE group configured for legacy HA. The floating IP address is applicable when the SE interfaces are not in the same subnet as the VIP or source NAT (SNAT) IP addresses that will use the SE group.  One floating interface IP is required per each attached subnet per SE group when configured in Legacy HA mode.

Configuring Legacy HA

To configure a pair of SEs for legacy HA:

  1. Create an SE group for the pair of SEs. Legacy HA requires each pair of active/standby SEs to be in its own SE group.
  2. Within each SE group:
    • Add 2 SEs.
    • Change the SE group's HA mode to legacy HA.
    • If applicable, add a floating IP interface.

Detailed steps are provided below.

Using the Web Interface

Create an SE Group for each Active/Standby Pair of SEs

  1. Navigate to Infrastructure > Clouds.
  2. Select the cloud.
  3. Select Service Engine Group (figure 2).
  4. Click Create Service Engine Group.
    Figure 2. Infrastructure > Clouds > Service Engine Group
  5. Enter a name for the group.
  6. Select Legacy HA Active/Standby, as shown in figure 3. Some fields will disappear, while others, such as Floating IP Address, will appear.
    Figure 3. The HA settings section of the SE group editor. Legacy HA Active/Standby has been selected.
  7. If applicable, enter the (optional) floating IP address.
    Figure 4. When Distribute Load option is selected, a second floating IP field appears.
  8. By default, Avi Vantage compacts all virtual services onto one SE within the active/standby pair. To distribute active virtual services across the pair, within the Virtual Service Placement Policy section of the SE group editor, select the Distribute Load option (figure 4). Note that a second floating IP address may be specified. Assign virtual services on an individual basis to one or the other SE in the legacy pair by navigating to the Advanced tab in the virtual service editor.
  9. By default, virtual services that fail over are not migrated back to the SE that replaces the failed SE. Rather, load will remain compacted on the failover SE. Choose the Auto-redistribute Load option (figure 4) to make failback automatic.
  10. The Virtual Services per Service Engine field (figure 3) sets a maximum on the number of virtual services that may be placed, be they compacted onto one SE or not. By its nature, "legacy" is "non-elastic," such that for any given virtual service, exactly one placement (onto the virtual service's active SE) will be performed.
  11. Finally, uncheck the Health Monitoring on Standby SE(s) option (figure 3) if you prefer it to be performed only by active SEs.
  12. Click Save.

Add the Pair of SEs to the SE Group

  1. Navigate to Infrastructure > Clouds.
  2. Select the cloud.
  3. Select Service Engine.
  4. Click the edit icon next to one of the SEs.
  5. Select the SE group from the pull-down list.
    Figure 5. SE editor

Note: If Avi Vantage was deployed in full access mode, the other SE is automatically added to the same group. If Avi Vantage was installed in no access mode, select the second SE to also add it to the group.

Placing a Virtual Service on the SE Group

After configuring the SE group for legacy HA, virtual services can be placed on the group. To place a virtual service on the SE group:

  1. Navigate to Applications > Virtual Services.
    • If creating a new virtual service, select Create > Advanced. Enter a name and the VIP address, then click Advanced.
    • If editing an existing virtual service, click the edit icon in the row for the virtual service. Then click Advanced.
  2. In the Other Settings section, select the SE group from the pull-down list.
  3. Click Save.

Using the CLI

This example configures a pair of SEs (10.10.22.80 and 10.10.22.123) for legacy HA.

The following comamnds create a new SE group for the pair of SEs:

: > configure serviceenginegroup NewGroup3
: serviceenginegroup> ha_mode ha_mode_legacy_active_standby
: serviceenginegroup> floating_intf_ip 10.10.1.100
: serviceenginegroup> 
: serviceenginegroup> save

The following commands add the SEs to the new SE group:

: > configure serviceengine
              10.10.22.123  10.10.22.80
: > configure serviceengine 10.10.22.123
: serviceengine> se_group_ref NewGroup2
: serviceengine> save

Note: If Avi Vantage was deployed in full access mode, these commands add both SEs to the group. If Avi Vantage was installed in no access mode, additional commands are needed to add the second SE to the group:

: > configure serviceengine
              10.10.22.123  10.10.22.80
: > configure serviceengine 10.10.22.80
: serviceengine> se_group_ref NewGroup2
: serviceengine> save

The following commands configure a virtual service vs1 with VIP 10.10.1.99 on the SE group:

: > configure virtualservice vs1
: virtualservice> address  10.10.1.99
: virtualservice> se_group_ref NewGroup2
: virtualservice> save

Suggested Additional Reading

Updated: 2017-09-20 06:30:55 +0000