From user-return-12911-archive-asf-public=cust-asf.ponee.io@zookeeper.apache.org Mon Jul 20 11:57:31 2020 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mailroute1-lw-us.apache.org (mailroute1-lw-us.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with ESMTPS id 0F4CA18066D for ; Mon, 20 Jul 2020 13:57:31 +0200 (CEST) Received: from mail.apache.org (localhost [127.0.0.1]) by mailroute1-lw-us.apache.org (ASF Mail Server at mailroute1-lw-us.apache.org) with SMTP id 1CA58125577 for ; Mon, 20 Jul 2020 11:56:56 +0000 (UTC) Received: (qmail 6116 invoked by uid 500); 20 Jul 2020 11:56:25 -0000 Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@zookeeper.apache.org Delivered-To: mailing list user@zookeeper.apache.org Received: (qmail 5922 invoked by uid 99); 20 Jul 2020 11:56:24 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 20 Jul 2020 11:56:24 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 3F379180C30; Mon, 20 Jul 2020 11:56:23 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-he-de.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id xDeZVu1OCG4h; Mon, 20 Jul 2020 11:56:21 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a00:1450:4864:20::644; helo=mail-ej1-x644.google.com; envelope-from=szalay.beko.mate@gmail.com; receiver= Received: from mail-ej1-x644.google.com (mail-ej1-x644.google.com [IPv6:2a00:1450:4864:20::644]) by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 59CB87F51F; Mon, 20 Jul 2020 11:56:21 +0000 (UTC) Received: by mail-ej1-x644.google.com with SMTP id w6so17715501ejq.6; Mon, 20 Jul 2020 04:56:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=wDK3MXaTfpETOk9+yk4aCJw/jkDy7NiDBJb+GqayIRk=; b=RFo8UqnTNbA/tCmR/6lsKirxw0x2qpSsszaGWNJfqaRO5w9RHe3RVi6ZC00kSLcFr3 zE9QFaLwxOweAiUiVSvrfwtGmt+tepDnXDNFJj1n16opBP1/iDwvjCprxmXemqGfWi+G NSfbnKvZV9kLyZEFm2cF/KvaGG8LbrliPRC/hbbTxnQ0Lcd2Cubw/Y2ewBzu9uGA0lci Fs3gfHDbllsEABWyW14UoGAvMPf8kuWy5QyquVLQrh60go/Bd4QctxLZtkqWJ4OWF66V jBMdKVFtEzuQg4yVM+/ocIqjYwF43SElkXf/j0WoJuXEisEQaGXhKg8rdMijhDa89jtA PkOw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=wDK3MXaTfpETOk9+yk4aCJw/jkDy7NiDBJb+GqayIRk=; b=Y7ZvoiUtOChL72m16Lfb+6eD4rBTKQ62WA7ToAlz7gjCMNqgyauInIPzeYu+NAlL9Q rRua6JKOKbdy9jgCweulYBI1+amr8wS/u6P4Mfprd0RAH/8SCil128to+Op4n9P1Zggx 51V83na7SXkblzvuQkrcR8uG0oIIWEXKHvg91Wig3blY0T8/WMpTXDY5sHp0mVKfwVVH airWag9oGQUJOZkowfm/SOJQ4uXWWuMZp3ZW+zaAMvlpxOaUEWQZmaJ3owLtmawk3mLj IWcNIScIYChrr61ggteskFllILNS1nTHiJhdo8HD0jcK2WHhl+NsrAkjL80sppqOFOJx jIHg== X-Gm-Message-State: AOAM532eoBP77+smWR+h8oNkiYVE+DcT1k7B26jdjYTapFpmzAfuEyPh 4ksbt2NQ0+01xzxmtwHnsU/bQp2VTcbkNQKHFhce8CbKIQ== X-Google-Smtp-Source: ABdhPJxzX0212rsShTMK6SAFZYn4kdJWZe1ONmbgchHJNMRtd2MS3LTh3R5ZtS6b1kCEVyux7+I/tLXV5Rlow0aPeBI= X-Received: by 2002:a17:906:e2ca:: with SMTP id gr10mr19791073ejb.81.1595246180550; Mon, 20 Jul 2020 04:56:20 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: =?UTF-8?B?U3phbGF5LUJla8WRIE3DoXTDqQ==?= Date: Mon, 20 Jul 2020 13:56:09 +0200 Message-ID: Subject: Re: Upgrading existing non-TLS cluster with no downtime To: UserZooKeeper Cc: DevZooKeeper Content-Type: multipart/alternative; boundary="000000000000ebca0605aade311a" --000000000000ebca0605aade311a Content-Type: text/plain; charset="UTF-8" echo "stat" | nc localhost 2182Hi, I guess this is the part you are referring: https://zookeeper.apache.org/doc/r3.5.8/zookeeperAdmin.html#Upgrading+existing+nonTLS+cluster (your link was pointing to the 3.3.2 admin guide where this chapter was missing) > 1) When I set sslQuorum=true and portUnification=true on the first server, does it go out of the quorum? And when these properties are set in the second server, a new quorum of first and second server is formed and now the third server is out of quorum. When the 3rd server follows suit, it is added back to the quorum. the "sslQuorum=true and portUnification=true" setting is needed in step 4 (although the numbering is bad in the markdown...). After step 3 you already have a 3 server quorum up with portUnification=true, meaning the cluster can handle both TLS/SSL and regular/non-secure connections. So when you restart server 1 with sslQuorum=true, then it will be able to re-join to the quorum, as server 2 and 3 are capable of handling SSL connections (even if they are not using it for connection initiation). So ideally between restarting each servers with sslQuorum=true, you always should have a 3 node full quorum. > 2) The guideline says to check after restarting every broker that the quorum is healthy, is there any metric to track that? I send the "stat" command to all nodes to see if everyone is connected to the quorum. E.g.: echo "stat" | nc localhost 2181 I usually use 4-letter-word commands but the REST admin API works as well, and actually that is the officially recommended way, as the 4-letter-words are / will be deprecated some time. For the admin server see: https://zookeeper.apache.org/doc/r3.5.8/zookeeperAdmin.html#sc_adminserver Kind regards, Mate On Tue, Jul 14, 2020 at 10:52 PM Sankalp Bhatia wrote: > +users > > On Tue, 14 Jul 2020 at 21:51, Sankalp Bhatia > wrote: > > > Hi All, > > > > I am trying to follow the section "Upgrading existing non-TLS cluster > with > > no downtime" in the zookeeper guide : > > https://zookeeper.apache.org/doc/r3.3.2/zookeeperAdmin.html > > > > I have an ensemble of 3 servers. I have a couple of questions: > > > > 1) When I set sslQuorum=true and portUnification=true on the first > > server, does it go out of the quorum? And when these properties are set > > in the second server, a new quorum of first and second server is formed > and > > now the third server is out of quorum. When the 3rd server follows suit, > it > > is added back to the quorum. > > > > If this is the case, what is the use of a the port-unification feature > > here? > > > > 2) The guideline says to check after restarting every broker that the > > quorum is healthy, is there any metric to track that? > > > > Thanks, > > Sankalp > > > > > > > > > --000000000000ebca0605aade311a--