The way you configure device service clustering (DSC®) (also known as high availability) on a VIPRION® system varies depending on whether the system is provisioned to run the vCMP® feature.
For a Sync-Failover device group that consists of VIPRION® systems that are not licensed and provisioned for vCMP®, each VIPRION cluster constitutes an individual device group member. The following table describes the IP addresses that you must specify when configuring high availability.
|Feature||IP addresses required|
|Device trust||The primary floating management IP address for the VIPRION cluster.|
|ConfigSync||The unicast non-floating self IP address assigned to VLAN internal.|
|Connection mirroring||For the primary address, the non-floating self IP address that you assigned to VLAN
HA. The secondary address is not required, but you can specify any
non-floating self IP address for an internal VLAN.
Important: Connection mirroring requires that both devices have identical hardware platforms (chassis and blades). If you plan to enable connection mirroring between two VIPRION chassis, each chassis within the Sync-Failover device group must contain the same number of blades in the same slot numbers. For more information, see the section Configuring connection mirroring between VIPRION clusters.
On a vCMP® system, the devices in a device group are virtual devices, known as vCMP guests. You configure device trust, config sync, failover, and mirroring to occur between equivalent vCMP guests in separate chassis.
For example, if you have a pair of VIPRION® systems running vCMP, and each system has three vCMP guests, you can create a separate device group for each pair of equivalent guests. This table shows an example.
|Device groups for vCMP||Device group members|
By isolating guests into separate device groups, you ensure that each guest synchronizes and fails over to its equivalent guest. The next table describes the IP addresses that you must specify when configuring high availability.
|Feature||IP addresses required|
|Device trust||The cluster management IP address of the guest.|
|ConfigSync||The non-floating self IP address on the guest that is associated with VLAN internal on the host.|
|Connection mirroring||For the primary address, the non-floating self IP address on the guest that is
associated with VLAN internal on the host. The secondary address is
not required, but you can specify any non-floating self IP address on the guest that is
associated with an internal VLAN on the host.
Important: Connection mirroring requires that both devices have identical hardware platforms (chassis and blades). If you plan to enable connection mirroring between two guests, each guest must reside on a separate chassis, be assigned to the same number of blades in the same slot numbers, and have the same number of cores allocated per slot. For more information, see the section Configuring connection mirroring between VIPRION clusters.
When you configure a VIPRION® system (or a VIPRION system provisioned for vCMP®) to be a member of a Sync-Failover device group, you can specify the minimum number of cluster members (physical or virtual) that must be available to prevent failover. If the number of available cluster members falls below the specified value, the chassis or vCMP guest fails over to another device group member.
When one of the BIG-IP® modules provisioned on your VIPRION® system or guest is Application Policy Manager ®(APM®), you have a special consideration. The BIG-IP system automatically mirrors all APM session data to the designated next-active device instead of to an active member of the same VIPRION or vCMP cluster. As a result, unexpected behavior might occur if one or more cluster members becomes unavailable.
To prevent unexpected behavior, you should always configure the chassis or guest so that the minimum number of available cluster members required to prevent failover equals the total number of defined cluster members. For example, if the cluster is configured to contain a total of four cluster members, you should specify the Minimum Up Members value to be 4, signifying that if fewer than all four cluster members are available, failover should occur. In this way, if even one cluster member becomes unavailable, the system or guest will fail over to the next-active mirrored peer device, with full cluster member availability.
For VIPRION® systems, each device in a Sync-Failover device group can be either a physical cluster of slots within a chassis, or a virtual cluster for a vCMP® guest. In either case, you can configure a device to mirror an active traffic group's connections to its next-active device.
You enable connection mirroring on the relevant virtual server, and then you configure each VIPRION cluster or vCMP guest to mirror connections by choosing one of these options:
In addition to enabling connection mirroring on the virtual server, you must also assign the appropriate profiles to the virtual server. For example, if you want the BIG-IP system to mirror SSL connections, you must assign one or more SSL profiles to the virtual server.
Using the BIG-IP® Configuration utility, you can configure connection mirroring between two VIPRION® or vCMP® clusters as part of your high availability setup: