HA synchronization
The master node pushes most of its configuration to the other member nodes. This is known as synchronization. Synchronization occurs immediately when an appliance joins the cluster, and thereafter every 30 seconds. HA synchronization is an automatic system process. It cannot be managed manually with user commands.
Synchronization includes:
• Core CLI-style configuration file (fadc_system.conf)
• X.509 certificates, certificate signing request files (CSR), and private keys
• Layer 7 virtual server error message files
• Layer 4 connection state, Layer 4 persistence, and Layer 7 persistence
• Health check status (active-passive deployments only)
For most settings, you configure only the primary node, and its settings are pushed to other members.
Table 117 summarizes the configuration settings that are not synchronized. All other settings are synchronized.
Table 117: HA settings that are not synchronized
Setting | Explanation |
Hostname | The hostnames are not synchronized to enable you to use unique names. |
SNMP system information | Each member node has its own SNMP system information so that you can maintain accurate, separate data in SNMP collections. However, the network interfaces of a standby node are not active, so they cannot be actively monitored with SNMP. |
HA settings | Most of the HA configuration is not synchronized in order to support HA system operations. In particular: • Priority and Override settings—These settings are used to elect a primary node, so they are not synchronized to enable differentiation. • Group ID—Nodes with the same Group ID join a cluster. The setting precedes and determines group membership, so it is set manually. • HA mode—Many administrators prefer to be able to switch the primary node from an HA mode to standalone mode without the other nodes following suit, or to switch a secondary node to standalone mode and have that setting not overwritten by periodic synchronization, so the HA mode setting is not pushed from the primary node to the member nodes. • Node list and Local Node ID—These settings are for active-active mode only. They identify a node uniquely within an active-active load balancing group, so they are not synchronized to enable differentiation. |
In addition to the HA configuration, some data is also not synchronized:
• Log messages—These describe events that happened on that specific appliance. After a failover, you might notice that there is a gap in the original active appliance’s log files that corresponds to the period of its down time. Log messages created during the time when the standby was acting as the active appliance (if you have configured local log storage) are stored there, on the original standby appliance.
• Generated reports—Like the log messages that they are based upon, reports also describe events that happened on that specific appliance. As such, report settings are synchronized, but report output is not.
You can view the status of cluster members from the dashboard of the primary node. You might need to log into the system for the a non-primary member node in the following situations:
• To configure settings that are not synchronized.
• To view log messages recorded about the member node itself on its own hard disk.
• To view traffic reports for traffic processed by the member node.