I
I
Ilya Rodionov2019-06-29 14:44:45
Nginx
Ilya Rodionov, 2019-06-29 14:44:45

How to roll one nginx configuration to all balancers?

Colleagues, hello.
There is a small problem, tell me, please, how can it be easier to solve.
There are several (let's say two) balancers/fronts that all requests will fall on. They will both rip/ospf the same VIP ip address on the local network. All requests will go to the border router, and from there go either to balancer1 at the VIP address, or to balancer2 (stupid round-robin in L3 balancing)
The same nginx.conf configuration will be rolled out on the balancers, so if one balancer dies - all requests will go to the second one so as not to spill traffic (in fact, it will spill, since the announcement will not be removed immediately from one. but this is not so critical)
The question is just this.
1. Tell me, please, how to correctly and correctly roll the required nginx.conf configuration onto all balancers? Do it with git pull cron once a minute, do it ansible or something else? how would you solve this question?
2. How to roll certificates? Just shove it into your private gitlab and roll from it? Or are there better practices in this matter
3. Logs, log rotation: how is it more convenient to store logs in one place a la elk/splunk, or is it generally not worth doing (if there are no tasks for subsequent analysis/processing of logs)?
4. How is this method in general - is it logical or not (it is worth noting, this is a home "experiment" as a training) regarding balancing: stupid L3 balancing followed by L7 on the balancers, and if one balancer falls, it will automatically shoot back.
Or, in principle, there are more "elegant" solutions without the announcement of a VIP address, without such balancing, etc.
Particularly interested in the first, second and fourth question.
Thank you!

Answer the question

In order to leave comments, you need to log in

1 answer(s)
O
OnYourLips, 2019-06-29
@OnYourLips

1. Ansible
2. Ansible + certbot (DNS challenge)
3. logrotate + ELK

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question