Jednoduchši HA na Proxmox

[darebacik]

V homelab pouzivam Proxmox, kde mam niekolko KVM a LXC (web servery, rev,  proxy, vpn-ky, nextcloud, collabora, vaultwarden, proste bezne aplikacie k zivotu). Fungujem takto uz niekolko rokov (cca 10), ale neposuvam sa nejak dalej.

Zatial som nemal vacsi problem, raz za 3-4 roky vymenim HW (MB, RAM, SSD), aj ked ten predosli funguje, ale zacinal som na RAM 4GB, teraz 32GB.

Aj ked bezim na optickom pripojeni, tak vypadky sa mi zdaju celkom casto (cca 1x do mesiaca, niekedy aj na 30 minut). Napr. koniec novembra 2024 sa to po polnoci rozpojilo a na 98 pokus po 20 minutach sa to pripojilo

Kód: [Vybrat]

Nov 27 00:08:23 ppp 13330 [wan_link0] LCP: no reply to 2 echo request(s)
Nov 27 00:08:34 ppp 13330 [wan_link0] LCP: no reply to 3 echo request(s)
Nov 27 00:08:44 ppp 13330 [wan_link0] LCP: no reply to 4 echo request(s)
Nov 27 00:08:54 ppp 13330 [wan_link0] LCP: no reply to 5 echo request(s)
Nov 27 00:08:54 ppp 13330 [wan_link0] LCP: peer not responding to echo requests
Nov 27 00:08:54 ppp 13330 [wan_link0] LCP: state change Opened --> Stopping
Nov 27 00:08:54 ppp 13330 [wan_link0] Link: Leave bundle "wan"
Nov 27 00:08:54 ppp 13330 [wan] Bundle: Status update: up 0 links, total bandwidth 9600 bps
Nov 27 00:08:54 ppp 13330 [wan] IPCP: Close event
Nov 27 00:08:54 ppp 13330 [wan] IPCP: state change Opened --> Closing
Nov 27 00:08:54 ppp 13330 [wan] IPCP: SendTerminateReq #21
Nov 27 00:08:54 ppp 13330 [wan] IPCP: LayerDown
Nov 27 00:08:54 ppp 13330 [wan] IFACE: Removing IPv4 address from pppoe0 failed(IGNORING for now. This should be only for PPPoE friendly!): Can't assign requested address
Nov 27 00:08:54 ppp 13330 [wan] IFACE: Down event
Nov 27 00:08:54 ppp 13330 [wan] IFACE: Rename interface pppoe0 to pppoe0
Nov 27 00:08:54 ppp 13330 [wan] IFACE: Set description "WAN"
Nov 27 00:08:54 ppp 13330 [wan] IPCP: Down event
Nov 27 00:08:54 ppp 13330 [wan] IPCP: LayerFinish
Nov 27 00:08:54 ppp 13330 [wan] Bundle: No NCPs left. Closing links...
Nov 27 00:08:54 ppp 13330 [wan] IPCP: state change Closing --> Initial
Nov 27 00:08:54 ppp 13330 [wan] Bundle: Last link has gone, no links for bw-manage defined
Nov 27 00:08:54 ppp 13330 [wan_link0] LCP: SendTerminateReq #21
Nov 27 00:08:54 ppp 13330 [wan_link0] LCP: LayerDown
...
Nov 27 00:27:38 ppp 13330 [wan_link0] Link: reconnection attempt 98
Nov 27 00:27:38 ppp 13330 [wan_link0] PPPoE: Connecting to ''
Nov 27 00:27:38 ppp 13330 PPPoE: rec'd ACNAME "ke-pols-bras-1"
Nov 27 00:27:38 ppp 13330 [wan_link0] PPPoE: connection successful
Ak to je v noci, tak v pohode, nemam garantovanu linku a neprichadzam o ziadne zisky, ale ak nieco ISP robi, tak aspon nech dopredu informuje.

Chcel by som skusit HA a pouzit na to nejaky VPS. Samozrejeme do HA nemozem zapojit vsetky KVM/LXC, pretoze to ani nejde. Napr. v KVM mam aj pfSense, alebo nechcem poskytovat tretej strane VPN configy, alebo vaultwarden docker a apod.

Ale napr. niektore weby, rev. proxy by do HA mohli byt zapojene. Najskor mi ide o to, ked padne cely homelab (co sa mi nikdy nestalo) aby bolo online aspon to dolezite pokial to nahodim (zalohy KVM a LXC mam v bezpeci sifrovane na cloude).

Je v proxmx nejaka ficurka, ktora zjednodusuje pre adminov vytvorit HA, prip. ako riesit failover ? Napr. pojde mi aj o automatizovany prepis IP adries na DNS serveroch (cloudflare, noip a pod).

Poprosil by som o nakopnutie do coho ist a comu sa vyhybat. V HA som uplny novacik. Aj ked viem ze to z mojho pohladu nebude rentabilne, lebo za VPS musim zaplatit, ale chcem to aspon skusit.

[Reklama]

[hknmtt]

Musis si prenajat nejaky VPS na ktorom pobezi kopia(ako si spominal) a skryt to za proxynu, co je dalsie VPS, ale to moze byt nejaka mikroinstancia ktora jedine co robi je ze robi healtcheck  requesty na tvoje servery a podla toho prepne spojenie na zalozny server. Eventuelne to mozes osetrit na urovni dns a neriesit proxinu. Myslim ze by to mohlo zmaknut nejake geodns, ale neviem, ci je mozne nastavit primary-secondary na tom aby ti neroutoval na zalozny server ak hlavny bezi  lebo o tom geodns primarne nie je, ale je mozne ze nejaky provider ma taku funkcionalitu.

[RDa]

Je v proxmx nejaka ficurka, ktora zjednodusuje pre adminov vytvorit HA, prip. ako riesit failover ? Napr. pojde mi aj o automatizovany prepis IP adries na DNS serveroch (cloudflare, noip a pod).

A neni to trocha overkill na ty bezne minutove vypadky?

Pokud bych chtel prehazovat treba emaily, tak muzes mit externe sekundarni server a mit v DNS spravne priority - jenze pak taky musis poresit stejnou konfiguraci a preposlani/doruceni tech mailu domu prece.

Radeji bych doporucil najit poskytovatele, co nebude mit tak caste vypadky, nebo to vykryl sekundarnim ISP (za predpokladu, ze mas doma vyreseno zalohovane napajeni) a pro sve uzivatele nasadil nejakou VPN, ktera bude mit onen priority list s obemi verejnymi IP.

[darebacik]

Emaily nepotrebujem riesit. Mozno mi skor ide o to ak by sa to poruchalo po HW stranke (disky, ram, MB ...). To sa niekedy neda zohnat za 24 hod (vacsinou sa zle veci prihodia v piatok poobede). Aj ked nejaky HW by som nasiel v zasobach (kusky co mi ostali po vymene za novy HW), ale je to generacne stare, ale ako zaskok by to mozno stacilo.

V neposlednom rade chcem sa trocha naucit aj s HA, failover a pod.