Proxy HA

Users
1

In a 2 rack controller setup with proxy support, a machine will be tied to the controller that help set it up initially.

On Ubuntu, the apt configuration will have the controller’s IP configured:

$ cat /etc/apt/apt.conf.d/90curtin-aptproxy 
Acquire::http::Proxy "http://192.168.50.11:8000/";

If that controller goes down, you get errors:

 apt update
Ign:1 http://archive.ubuntu.com/ubuntu jammy InRelease
Ign:2 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
Ign:3 http://archive.ubuntu.com/ubuntu jammy-security InRelease
Ign:4 http://archive.ubuntu.com/ubuntu jammy-backports InRelease
Ign:1 http://archive.ubuntu.com/ubuntu jammy InRelease
Ign:2 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
Ign:3 http://archive.ubuntu.com/ubuntu jammy-security InRelease
Ign:4 http://archive.ubuntu.com/ubuntu jammy-backports InRelease
Ign:1 http://archive.ubuntu.com/ubuntu jammy InRelease
Ign:2 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
Ign:3 http://archive.ubuntu.com/ubuntu jammy-security InRelease
Ign:4 http://archive.ubuntu.com/ubuntu jammy-backports InRelease
Err:1 http://archive.ubuntu.com/ubuntu jammy InRelease
  Could not connect to 192.168.50.11:8000 (192.168.50.11), connection timed out
Err:2 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
  Unable to connect to 192.168.50.11:8000:
Err:3 http://archive.ubuntu.com/ubuntu jammy-security InRelease
  Unable to connect to 192.168.50.11:8000:
Err:4 http://archive.ubuntu.com/ubuntu jammy-backports InRelease
  Unable to connect to 192.168.50.11:8000:
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
16 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/jammy/InRelease  Could not connect to 192.168.50.11:8000 (192.168.50.11), connection timed out
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/jammy-updates/InRelease  Unable to connect to 192.168.50.11:8000:
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/jammy-security/InRelease  Unable to connect to 192.168.50.11:8000:
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/jammy-backports/InRelease  Unable to connect to 192.168.50.11:8000:
W: Some index files failed to download. They have been ignored, or old ones used instead.

Would it be possible to configure MAAS to use a VIP or load balancer’s IP instead of the direct controller’s IP in this case?

2

in the UI: settings → network → proxy → external?

3

That turns the built-in proxy off.

4

AFAIK there is no such functionality in MAAS to achieve what you described. At the moment the only way to do it is that you setup the proxy by yourself in HA mode and set it with the settings I suggested above

1 Like
5

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.