Supercluster Data Management
Note
This process is used only for non-production testing.
This topic explains how to import data from one Supercluster to another Supercluster. For example, you might want to synchronize a test Supercluster with production Supercluster data.
The procedure uses two scripts, remap_supercluster_backup.rb
and update_supercluster_login.rb
, which are found in $INSTALL_ROOT/Illumio/scripts
.
Back Up Source Supercluster
Back up each PCE in the source Supercluster. See Back Up Supercluster for information.
Restore Backup to Target Supercluster
To import the database, you use a procedure similar to restoring a backup with a few extra steps.
Prepare Target Supercluster
Install the PCE software on each node in the target Supercluster. The software version used on the target Supercluster should be the same as that installed on the source Supercluster.
Copy the backup files to the data0 node of each corresponding PCE in the target Supercluster. When the target Supercluster has fewer PCEs, decide which backups you want to restore.
Collect the public IP addresses for each target PCE. You can find them in the
cluster_public_ips
section of each PCE’s Runtime Environment File.When you have configured the following settings, verify that they are identical on the source and target Superclusters:
front_end_https_port
front_end_event_service_port
front_end_management_https_port
Remap Supercluster Backup Files
Perform the following steps on each PCE in the target Supercluster.
On the data0 node of the PCE in the target Supercluster, run the script
remap_supercluster_backup.rb
with the name of the backup file to be remapped and the name of the file in which to write the remapped backup data. Optionally include the flag--pce-fqdns-to-skip
with a comma-separated list of FQDNs you do not want to include in the remapped database.sudo -u ilo-pce remap_supercluster_backup.rb --pce-fqdns-to-skip FQDN1,FQDN2... source_backup_fileremapped_backup_file
For each source PCE FQDN in the backup, the script prompts for the following values:
The corresponding target FQDN
The corresponding target
cluster_public_ips
from that PCE's runtime environment file
When prompted, enter the Fully Qualified Domain Name (FQDN) of the target PCE where this backup will be restored.
After the remapped target backup file is written, copy the file to the data1 node.
Repeat these steps on each PCE in the target Supercluster.
Restore Remapped Backup Files
Follow the steps for restoring an entire Supercluster in Restore a PCE or Entire Supercluster, but do not bring the PCEs to runlevel 5. Leave the PCEs at runlevel 2.
Update the Login Service on the Leader
On the leader PCE, update login service properties by running the script
update_supercluster_login.rb
and specifying the full path to the remapped backup file generated byremap_supercluster_backup.rb
:sudo -u ilo-pce {{update_supercluster_login.rb {remapped_backup_file}}}
Bring the PCEs to runlevel 5:
sudo -u ilo-pce illumio-pce-ctl set-runlevel 5
After runlevel 5, do
sudo -u ilo-pce illumio-pce-ctl listen-only-mode disable