Book Image

OpenStack Cloud Security

By : Fabio Alessandro Locati
Book Image

OpenStack Cloud Security

By: Fabio Alessandro Locati

Overview of this book

Table of Contents (14 chapters)
OpenStack Cloud Security
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Designing a redundant environment for your APIs


Before starting to talk about how to make a safe environment, I'd like to spend few words on how to make a redundant environment for your APIs. Since the APIs are a critical part of OpenStack, if they do not respond properly, the majority of operations OpenStack allows you to do will not be available.

There are many possibilities for designing a redundant service, but we will cover only the one that is by far the safest and the most redundant.

In this design, we have two load balancers that are both listed as A records in your DNSs. This will grant that even if one of the two dies somehow, the other will respond to all requests using the DNS round-robin; and while they are both up and running, they will split the traffic.

Note

Although the DNS round-robin will not grant you that your nodes will be hit by the same amount of traffic, it's a very inexpensive and reliable solution. It is for these reasons that I suggest this one.

Those frontend servers...