HA with VSX cluster

[DR_74]

Hello,

We have a Cluster  with VSX gateway. Let's say we run in HA mode (not VSLS). So, all VS are active on FW1.

I would like to know if in this architecture we can face a Split Brain scenario?

If we loose sw1 or sw2 => we loose the SYNC interface ==> does it mean all FW will become active? ==> SPLIT BRAIN

If this is the expected behaviour if we loose the switch 1 or 2, what can be done to avoid the split brain ?

- Is VSLS an option?

- Moving SYNC on sw3 and sw4?

- A bond for SYNC (if possible) (linked to sw1/sw3 and sw2/sw4)?

Thank you

[Chris_Atkinson]

HA is now considered a subset of VSLS

On the surface simply moving Sync to sw3 & sw4 isn't helpful.

Sync bond is the most resilient option where available.

[DR_74]

Hello Chris,

So the design as it is, is susceptible to Split Brain when we loose the Sync interface? Correct?

[Bob_Zimmerman]

You would also have to lose the interconnectivity for all of the monitored interfaces (by default, the highest and lowest VLAN on each physical interface in each VS. The cluster heartbeats include member status and interface information on all interfaces. Essentially, the cluster members would need to be unable to reach each other on any interface to reliably cause both members to go active.

[DR_74]

So in case sw1 is down, this means that the cluster memebrs should be able to see each other via their other interface, and so no split brain?

[PhoneBoy]

From R81.10, new VSX clusters must use VSLS.
I assume VSX is similar to traditional ClusterXL where bonded sync links are generally considered best practice.