SkyFormation - HA - Active Passive Deployment

Initial Installation

Preliminary Step

Mount /opt/exabeam/data/sk4 in both machines to the same shared disk mount

Machine A (arbitrarily chosen as active)

1. Run a standard installation

2. Stop the sk4compose.service by running:

   sudo systemctl stop sk4compose

Machine B (arbitrarily chosen as passive)

3. If communication should be routed via a proxy, run the following bash command:

   export https_proxy=https://<host>:<port>
   or:
   export https_proxy=https//:username:password@<host>:<port>
   for an authenticated proxy

4. If docker is not already installed - install docker. This can be done by running the following bash command (as root or sudo):

   curl -L https://download.skyformation.net/v2/download/installer/edge/compose-commons.sh > commons.sh && source commons.sh && install_docker && systemctl start docker

5. If communication should be routed via a proxy, make sure https proxy is defined at /etc/systemd/system/docker.service.d/http-proxy.conf If file does not exist create it, then add the following configuration:

   [Service]
   Environment="HTTPS_PROXY=https://<host>:<port>" 
   

   * https//:username:password@<host>:<port> for an authenticated proxy

6. Run the following bash commands:

   systemctl daemon-reload

   systemctl restart docker

7. If docker-compose is not already installed - install docker-compose. This can be done by running the following bash commands:

   curl -L https://github.com/docker/compose/releases/download/1.16.1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
   

   chmod +x /usr/local/bin/docker-compose

8. Copy /etc/systemd/system/sk4compose.service from machine A to machine B

9. Run the following bash command:

   systemctl daemon-reload

10. Pull SkyFormation docker images by running the following bash command:

    curl -L https://download.skyformation.net/v2/download/installer/edge/compose-commons.sh > commons.sh && source commons.sh && docker_login <skyforation license key> && docker-compose -f /opt/exabeam/data/sk4/docker-compose.yml pull

Machine A

11. Start the active SkyFormation server by running the following bash command:

    sudo systemctl start sk4compose.service

Upgrading SkyFormation

Machine A

1. Run a standard upgrade procedure

Machine B

2. Pull SkyFormation docker images by running the following bash command:

   curl -L https://download.skyformation.net/v2/download/installer/edge/compose-commons.sh > commons.sh && source commons.sh && docker_login <skyforation license key> && docker-compose -f /opt/exabeam/data/sk4/docker-compose.yml pull

Detecting SkyFormation is Down

The are two basic options to detect SkyFormation Server is down:

• By checking the sk4compose service status

  sudo service sk4compose status

• By calling SkyFormation open API Get All Accounts Health Status (open API should be enabled).

Switching Between Active and Passive

1. Stop service at active by running the bash commands:

   sudo systemctl stop sk4compose

   sudo systemctl disable sk4compose

2. Start service at passive by running the bash commands:

   sudo systemctl enable sk4compose

   sudo systemctl start sk4compose