[OpenAFS] AFSDB records

Brunckhorst, Ralf ralf.brunckhorst@hp.com
Tue, 4 May 2010 15:31:02 +0000


--Apple-Mail-4-474603282
Content-Type: multipart/alternative;
	boundary=Apple-Mail-3-474603212


--Apple-Mail-3-474603212
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252

Hi,

I would like to get some info regarding AFSDB-records.

Here some background info:
  * 30000-40000 afs-clients running on Linux/Solaris.
  * client-version: 1.2.x and 1.4.x
  * 2 cells with 3 x AFSDB-servers for each cell
  * near all clients have a static CellServDB file
  * only access to the 2 cells in the intranet
The basic setup of the cells was done in the end of the 90. and only for =
one site. After several years the usage has increased and now many site =
worldwide are using the AFS-cells.

Because there are some changes in our IT-envirenment we have to move the =
AFSDB-servers to a new central DataCenter. And this require a change of =
the CellServDB on every afs-client.

We have created 2 DNS-domains (like our two AFS-cells) that include the =
AFSDB-records for every AFSDB-server.
All new installed afs-clients will get the following config:
  * afsd options: "-afsdb -dynroot -fakestat"
  * CellServDB will include only the cell-name without any AFSDB-IPs =
(needed because we use dynroot)
       >CELL-1
       >CELL-2
So new afs-clients will get new AFSDB-Server config automatically via =
DNS.

Questions:=20
  * What is the behavior of a running afs-client if we change an =
AFSDB-record in DNS (because one of the AFSDB-server is moved to a new =
location)?
  * Will the changes be done automatically on the afs-client?=20
  * Also for the Cache Manager's kernel-resident list of database server =
machines?


We have an update-script for the existing old afs-clients that have a =
CellServDB file with static IP info. This will be run daily via cron.
It fetch a central CellServDB file (if it difer with the local one) and =
change the kernel-resisdent list via 'fs newcell =85'
Questions:
  * How can we migrate those clients to use the AFSDB-records without =
rebooting (will the kernel-resisdent list updated if the afsd started =
with -afsdb)?
  * Or is the reboot needed to get rid of the kernel-list?
  * Which is the oldest afs-version that have support for -afsdb?

We will change only one AFSDB-server per week so the clients have time =
to make the changes via the script.

I hope you can give me some feedback.

/Ralf
  =20=

--Apple-Mail-3-474603212
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=windows-1252

<html><head></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; =
">Hi,<div><br></div><div>I would like to get some info regarding =
AFSDB-records.</div><div><br></div><div>Here some background =
info:</div><div>&nbsp;&nbsp;* 30000-40000 afs-clients running on =
Linux/Solaris.</div><div>&nbsp;&nbsp;* client-version: 1.2.x and =
1.4.x</div><div>&nbsp;&nbsp;* 2 cells with 3 x AFSDB-servers for each =
cell</div><div>&nbsp;&nbsp;* near all clients have a static CellServDB =
file</div><div>&nbsp;&nbsp;* only access to the 2 cells in the =
intranet</div><div>The basic setup of the cells was done in the end of =
the 90. and only for one site. After several years the usage has =
increased and now many site worldwide are using the =
AFS-cells.</div><div><br></div><div>Because there are some changes in =
our IT-envirenment we have to move the AFSDB-servers to a new central =
DataCenter. And this require a change of the CellServDB on every =
afs-client.</div><div><br></div><div>We have created 2 DNS-domains (like =
our two AFS-cells) that include the AFSDB-records for every =
AFSDB-server.</div><div>All new installed afs-clients will get the =
following config:</div><div>&nbsp;&nbsp;* afsd options: "-afsdb -dynroot =
-fakestat"</div><div>&nbsp;&nbsp;* CellServDB will include only the =
cell-name without any AFSDB-IPs (needed because we use =
dynroot)</div><div>&nbsp;&nbsp; &nbsp; &nbsp; =
&gt;CELL-1</div><div>&nbsp;&nbsp; &nbsp; &nbsp; &gt;CELL-2</div><div>So =
new afs-clients will get new AFSDB-Server config automatically via =
DNS.</div><div><br></div><div>Questions:&nbsp;</div><div>&nbsp;&nbsp;* =
What is the behavior of a running afs-client if we change an =
AFSDB-record in DNS (because one of the AFSDB-server is moved to a new =
location)?</div><div>&nbsp;&nbsp;* Will the changes be done =
automatically on the afs-client?&nbsp;</div><div>&nbsp;&nbsp;* <font =
class=3D"Apple-style-span" size=3D"3"><span class=3D"Apple-style-span" =
style=3D"font-size: 12px;">Also for the&nbsp;</span></font><span =
class=3D"Apple-style-span" style=3D"font-family: arial, sans-serif; =
"><font class=3D"Apple-style-span" size=3D"3"><span =
class=3D"Apple-style-span" style=3D"font-size: 12px;">Cache Manager's =
kernel-resident list of database server =
machines?</span></font></span></div><div><font class=3D"Apple-style-span" =
face=3D"arial, sans-serif"><font class=3D"Apple-style-span" =
size=3D"3"><span class=3D"Apple-style-span" style=3D"font-size: =
12px;"><br></span></font></font></div><div><font =
class=3D"Apple-style-span" face=3D"arial, sans-serif"><font =
class=3D"Apple-style-span" size=3D"3"><span class=3D"Apple-style-span" =
style=3D"font-size: 12px;"><br></span></font></font></div><div><font =
class=3D"Apple-style-span" face=3D"arial, sans-serif"><font =
class=3D"Apple-style-span" size=3D"3"><span class=3D"Apple-style-span" =
style=3D"font-size: 12px;">We have an update-script for the existing old =
afs-clients that have a CellServDB file with static IP info. This will =
be run daily via cron.</span></font></font></div><div><font =
class=3D"Apple-style-span" face=3D"arial, sans-serif">It fetch a central =
CellServDB file (if it difer with the local one) and change the =
kernel-resisdent list via 'fs newcell =85'</font></div><div><font =
class=3D"Apple-style-span" face=3D"arial, =
sans-serif">Questions:</font></div><div><font class=3D"Apple-style-span" =
face=3D"arial, sans-serif">&nbsp;&nbsp;* How can we migrate those =
clients to use the AFSDB-records without rebooting (will the =
kernel-resisdent list updated if the afsd started with =
-afsdb)?</font></div><div><font class=3D"Apple-style-span" face=3D"arial, =
sans-serif">&nbsp;&nbsp;* Or is the reboot needed to get rid of the =
kernel-list?</font></div><div><font class=3D"Apple-style-span" =
face=3D"arial, sans-serif">&nbsp;&nbsp;* Which is the oldest afs-version =
that have support for -afsdb?</font></div><div><font =
class=3D"Apple-style-span" face=3D"arial, =
sans-serif"><br></font></div><div><font class=3D"Apple-style-span" =
face=3D"arial, sans-serif">We will change only one AFSDB-server per week =
so the clients have time to make the changes via the =
script.</font></div><div><font class=3D"Apple-style-span" face=3D"arial, =
sans-serif"><br></font></div><div><font class=3D"Apple-style-span" =
face=3D"arial, sans-serif">I hope you can give me some =
feedback.</font></div><div><font class=3D"Apple-style-span" face=3D"arial,=
 sans-serif"><br></font></div><div><font class=3D"Apple-style-span" =
face=3D"arial, sans-serif">/Ralf</font></div><div><span =
class=3D"Apple-style-span" style=3D"font-family: arial, sans-serif; =
font-size: small; "><span class=3D"Apple-style-span" style=3D"font-family:=
 Helvetica; font-size: medium; =
">&nbsp;&nbsp;&nbsp;</span></span></div></body></html>=

--Apple-Mail-3-474603212--

--Apple-Mail-4-474603282
Content-Disposition: attachment; filename="smime.p7s"
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
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--Apple-Mail-4-474603282--