Skip to content
This repository was archived by the owner on Apr 29, 2024. It is now read-only.

Commit 8c87238

Browse files
authored
Merge pull request hashicorp#5215 from hashicorp/deployment_guide_updates
Include information about multi-dc Connect
2 parents 66c139c + 6580890 commit 8c87238

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

website/source/docs/guides/deployment.html.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,12 +79,18 @@ A typical use case is where datacenter1 (dc1) hosts share services like LDAP (or
7979

8080
Network areas allows peering between datacenters to make the services discoverable over WAN. With network areas, servers in dc1 can communicate with those in dc2 and dc3. However, no connectivity needs to be established between dc2 and dc3 which meets the compliance requirement of the organization in this use case. Servers that are part of the network area communicate over RPC only. This removes the overhead of sharing and maintaining the symmetric key used by the gossip protocol across datacenters. It also reduces the attack surface at the gossip ports since they no longer need to be opened in security gateways or firewalls.
8181

82+
#### Prepared Queries
83+
8284
Consul’s [prepared queries](/api/query.html) allow clients to do a datacenter failover for service discovery. For example, if a service `payment` in the local datacenter dc1 goes down, a prepared query lets users define a geographic fallback order to the nearest datacenter to check for healthy instances of the same service.
8385

8486
~> **NOTE** Consul clusters must be WAN linked for a prepared query to work across datacenters.
8587

8688
Prepared queries, by default, resolve the query in the local datacenter first. Querying KV store features is not supported by the prepared query. Prepared queries work with ACL. Prepared query config/templates are maintained consistently in Raft and are executed on the servers.
8789

90+
#### Connect
91+
92+
Consul [Connect](/docs/guides/connect-production.html) supports multi-datacenter connections and replicates [intentions](/docs/connect/intentions.html). This allows WAN federated DCs to provide connections from source and destination proxies in any DC.
93+
8894
## Network Connectivity
8995

9096
LAN gossip occurs between all agents in a single datacenter with each agent sending a periodic probe to random agents from its member list. Agents run in either client or server mode, both participate in the gossip. The initial probe is sent over UDP every second. If a node fails to acknowledge within `200ms`, the agent pings over TCP. If the TCP probe fails (10 second timeout), it asks configurable number of random nodes to probe the same node (also known as an indirect probe). If there is no response from the peers regarding the status of the node, that agent is marked as down.

0 commit comments

Comments
 (0)