I've heard it several times from different people now, and I've just talked to Mr. Pirner from Hetzner myself: due to security reasons Hetzner ( www.hetzner.de ) will stop support for high-availability solutions (heartbeat/keepalived etc.) in the next weeks or months. If you have a subnet with multiple IP addresses, they will bind the IP addresses to a server so that it will not be possible to have a virtual or shared IP address (as shown in my HA tutorials, e.g. http://www.howtoforge.com/high-availability-load-balancer-haproxy-heartbeat-debian-etch and http://www.howtoforge.com/haproxy_loadbalancer_debian_etch ). They will send out an email to all their customers in the next days, and then it will take a few weeks or months until they make the switch. Until now, they don't offer an alternative solution for people that need HA (such as HowtoForge - HowtoForge runs on an HA cluster at Hetzner), but they told me that if enough people ask for such a solution they might come up with something. So I'm asking everyone who currently has a HA setup at Hetzner or is interested in doing it to post here. If we are enough, hopefully we can urge Hetzner to change their minds.
I'm currently relying on a HA setup on 2 servers with Hetzner. I need a HA solution as the non-profit organization I represent has previously had to deal with downtime and has caused them considerable problems. HA solves and prevents these issues for them.
Just to make people aware, this topic is also being discussed in the Hetzner forum in German at http://forum.hetzner.de/wbb2/thread.php?postid=99547 To view the forum, one must sign up. It is subject to manual verification though.
I've just created a sample letter (in German) to Hetzner. I urge everyone who has a HA setup or is interested in this to fax it or send it to Hetzner: Hetzner Online AG Industriestr. 6 91710 Gunzenhausen Fax +49 [0] 9831 61006-2 Edit: I've just added a version in Word format as well. I'm trying to get an English version prepared as well. Edit [2]: Thanks to toodles we now also have English sample letters.
I have two servers from Hetzner as well. I was pretty upset when I found out they stopped HA service. I hope they give it back to us soon or it might be time to look for other companies.
I've just updated my HA tutorials and added a link to this thread to make sure people know about this problem before they order a Hetzner server.
Does anyone know roughly what proportion of hosts allow this type of virtual IP set up? Is it common or rare for it to be allowed? Also, what is the best way of asking a prospective host if it is possible, to minimise the chances of misunderstanding. It'd be a nightmare to pay for hosting and then find it can't be done when you thought it could. Thanks for the haproxy tutorial.
Out of the three hosters I've worked with (Hetzner, 1&1, Strato), only Hetzner allowed it. I guess it's a rare feature. I'd ask if they support HA setups (e.g. with heartbeat or keepalived) where one IP address (the virtual IP address) can be shared by more than one host. BTW, anyone got any feedback from Hetzner?
The organisation I work for has been in contact Hetzner about the issue and as a result of that, I have been contacted by Hetzner. They said that they do not yet have a solution in place and do not yet know what, if anything, will be made available. They did want to reassure my organisation that what they would be able to do no matter what the case, is to give me not only a virtual IP but also a virtual MAC that can be moved between the servers with the IP address. This would allow me to continue my HA setup. The only disadvantage is that which ever server is the master will no longer be accessable via it's normal IP while it has the virtual IP. This is only possible for me because I have a crossover cable connecting the two servers which may not be the case with other customers. I would of course prefer a different solution, but I can live with this one. --toodles
This is a huge disadvantage for us because we run multiple Xen VMs per physical host. If I understand this right, only the active loadbalancer VM would be accessible while all other VMs on that machine would be cut off...
Ah yes. I see what you mean. Perhaps it would be possible to have an extra nic placed in each of your servers. I know it's extra work, and would involve a short amount of downtime, but then you could use one nic for the loadbalancing IP's and the other as the server's main IP. I think you're charged 15Euro/nic once off. Just an idea. If I understood your situation correctly, it should work, no? I realise that this isn't the ideal solution either, but at least you wouldn't be left stranded.
This would cause a lot of local testing (and therefore lost time) before we could use it on a production system.
:-( True. Let's hope Hetzner will come up with a solution and not put it's customers through trouble!!
I didn't consider using Hetzner when I first posted to this topic, but now having seen their prices, I'm really tempted to! I tried to register on their forums to see progress on the IP takeover issue but couldn't understand the German registration form. Can anyone fill me in on what is happening?
hi folks, we are located in rz 6 which still allows some subnets to be used by two machines on virtual interfaces. our latest subnet which we registered though doesn't route to both machines any more. did you get any feedback from hetzner? the support simply told me via e-mail that ha-solutions aren't supported any more and theres no alternative. i read that virtual mac-addresses could do the job? maybe we could even fake the mac by the active machine to bypass that check. did anyone of you guys get information obout alternatives? best regards, chris
Haven't heard anything back from Hetzner. I'm really hoping they don't touch existing HA setups. If they do, we will leave...
