Corosync and pacemaker clusters allow two machines to share a high availability address. Each machine has its own normal IP address used to administer the machine. There is then a third "service" IP address that Kamailio clients connect to. This normally runs on the primary machine as an IP alias eth0:0. The backup machine then monitors the health of the primary machine, and if it crashes the backup takes over the service IP address, again as eth0:0. Each machine monitors the other through the network.

Install corosync and pacemaker

Do the steps below on both machines. First, install the packages:

On machines running Debian or Ubuntu:

  • apt-get install ntp # If this fails, use apt-get install chrony instead
  • apt-get install pacemaker pcs
  • systemctl enable corosync.service
  • systemctl enable pacemaker.service

On machines running CentOS or Rocky Linux:

  • dnf config-manager --set-enabled HighAvailability
  • dnf install -y chrony
  • dnf install -y pacemaker pcs
  • systemctl enable corosync.service
  • systemctl enable pacemaker.service

On machines running Redhat Enterprise or Fedora:

  • yum -y install ntp
  • yum -y install pacemaker pcs
  • update-rc.d corosync defaults
  • update-rc.d pacemaker defaults

Configure corosync and pacemaker

Verify that the directory /var/log/corosync has been created on both machines. If not, then do:

  • mkdir /var/log/corosync

On the primary node, if running Debian or Ubuntu:

  • apt-get install haveged
  • corosync-keygen
  • apt-get remove --purge haveged
  • scp /etc/corosync/authkey username@<ip address of the secondary node>:/etc/corosync/.

On the primary node, if running CentOS, Redhat Enterprise, or Fedora:

  • yum install haveged # or dnf install haveged
  • corosync-keygen
  • yum remove haveged # or dnf remove haveged
  • scp /etc/corosync/authkey username@<ip address of the secondary node>:/etc/corosync/.

On the secondary node:

  • chown root: /etc/corosync/authkey
  • chmod 400 /etc/corosync/authkey

On both nodes:

  • cp /opt/enswitch/current/install/etc/corosync/corosync.conf /etc/corosync/corosync.conf
  • mkdir /etc/corosync/service.d
  • ln -s /opt/enswitch/current/etc/corosync/service.d/pcmk /etc/corosync/service.d/pcmk
  • ln -s /opt/enswitch/current/etc/corosync/corosync /etc/default/corosync
  • vi /etc/corosync/corosync.conf

Edit /etc/corosync/corosync.conf as follows:

  • Set the first IP address of your network in bindnetaddr under interface, under totem.
  • Set the IP addresses of the primary and secondary node under nodelist.
  • Set the hostnames of the primary and secondary node under nodelist.

On both nodes start the corosync and pacemaker services (or restart them if they are already started):

  • service corosync start
  • service pacemaker start

On only one of the nodes check whether there are any resources already configured by default:

  • pcs status

If there are these must be removed:

  • pcs resource disable <resource name>
  • pcs resource delete <resource name>

On only one of the nodes:

  • pcs property set stonith-enabled=false
  • pcs property set no-quorum-policy=ignore

To add the floating IP resource where Kamailio will be listening on run on either one of the nodes the following command after replacing the IP address and netmask with the appropriate values:

  • pcs resource create ip ocf:heartbeat:IPaddr2 ip=192.168.1.1 cidr_netmask=24 op monitor interval=30s --group enswitch

Note that the cluster resources group named "enswitch" will be created with the previous command.

Add the Enswitch resources that will be running on the nodes and ommit those that are not needed. They will be added to the existing "enswitch" resources group by running the following commands on only one of the nodes:

  • pcs resource create kamailio systemd:kamailio op monitor interval=30s --group enswitch
  • pcs resource create enswitch_messaged systemd:enswitch_messaged op monitor interval=30s --group enswitch
  • pcs resource create enswitch_sipd systemd:enswitch_sipd op monitor interval=30s --group enswitch

Disable resources which are managed by Corosync/Pacemaker so that they aren't started on system boot by systemd or init:

Systems using systemd:

  • systemctl disable kamailio
  • systemctl disable enswitch_messaged
  • systemctl disable enswitch_sipd

Systems using Devuan (and older Debian-like systems):

  • update-rc.d kamailio remove
  • update-rc.d enswitch_messaged remove
  • update-rc.d enswitch_sipd remove

Systems using CentOS, Fedora, or Redhat:

  • chkconfig kamailio off
  • chkconfig enswitch_messaged off
  • chkconfig enswitch_sipd off

On only one of the nodes check whether the resources have started and are active on the correct node:

  • pcs status

If any of the resources have not started, then run on any one of the nodes:

  • pcs resource enable <resource name>