topic Re: AZURE Cluster-VIP removed on failover in Cloud Firewall

AZURE Cluster-VIP removed on failover

Constantin_Pop — Thu, 26 Jul 2018 14:35:05 GMT

Hi everyone,

I setup a cluster on AZURE and on failover the API simply removes the VIP associated with the external interface instead of moving it to the other cluster member. The routes are updated correctly though.

The API debug shows only a removal order. Did anyone notice similar behavior?

Gateways are running R80.10 with Jumbo HF Take 112.

Thanks!

Re: AZURE Cluster-VIP removed on failover

Constantin_Pop — Thu, 26 Jul 2018 15:49:13 GMT

Never mind, I just found the issue. Do not delete the cluster public IP resource in Azure as indicated in sk110194, you can leave it empty without an IP.

If you delete it, this will break the API calls.

sk110194:

Deployments without a public cluster address

C. Click cluster public IP address resource -> Delete it.

Re: AZURE Cluster-VIP removed on failover

Ranokarno_Ranok — Mon, 30 Jul 2018 08:48:10 GMT

Constantin Pop do you managed to get support team to clarify this ?

can you elaborate leaving public ip empty ? I only know that we can disassociate public ip from 'cluster-vip'

Re: AZURE Cluster-VIP removed on failover

Constantin_Pop — Tue, 31 Jul 2018 18:08:56 GMT

Hi, no, I didn't raise a SR since I've got it working but I did leave a feedback to the SK.

Yes, you disassociate the public IP and leave the 'cluster-vip' object in the Azure Resource Group empty, don't delete it.