UFM HA supports High-Availability on the host level for UFM products (UFM Enterprise/UFM Appliance/UFM CyberAI) The solution is based on pacemaker to monitor services and DRBD to sync file-system states. The HA package can be used with both bare-metal and Dockerized UFM products.
UFM HA should be installed on two machines, master and standby.
- Centos Master
- DRBD utils 8.4 or up.
Setting HA Cluster Password
HA cluster user is a user used for pacemaker synchronization. the password for the user should be the same on both machines. To set the password, run the following command on both machines (order does not matter).
Configuring Pacemaker and DRBD
- You must run configuration script on the standby machine, then on the master machine.
- Running config command will not start UFM services, you have to run it directly from the master machine.
- Initial file system sync between master and standby may take few minutes, depending on your sync interface speed.
- You must wait for the sync process before starting the services. You may use the status command for monitoring the sync.
If you are using high-availability for both UFM Cyber-AI and UFM Enterprise you have to change the following line in
Stopping UFM Services
You may stop UFM services using the following stop command.
Takeover command can be executed on the standby machine so it will be the master.
Failover command can be executed on the master machine so it will be the standby.
Replace HA Node
To replace old standby, detach the old standby, then configure the new standby, and attach it to the cluster.
On the master, run the detach command:
On the new standby, run the config command, for more information, refer to ufm-cai-jobs.
On the master node, run the attach command: