Failover - Hot Standby Engine

Failover is an alternative monitoring instance that is used to ensure that your network remains monitored even when your primary monitoring setup goes down. Netflow Analyzer helps in ensuring uninterrupted monitoring of your network by allowing you to configure a secondary monitoring instance on a separate server.

Working mechanism:

The primary server updates a value called heartbeat in the database. The heartbeat value is a counter that is incremented by the primary server at a specific frequency of time. The secondary server monitors the heartbeat value to check if it gets updated in the specified time interval. When the primary server goes down, it will not be able to update the heartbeat value in the database. If the heartbeat value in the database is not updated for the last 60 seconds, the primary server is considered to have gone down and the secondary monitoring instance takes over. This secondary server will continue monitoring the network as long as it is up. Meanwhile, if the primary server is up (recovered and restarted), it will take the standby mode and let the secondary server continue monitoring.

The information between the primary and secondary instances are synced periodically, thus ensuring that you don't miss netflow data(such as Traffic, Applications, Conversations etc.,) when your primary NetFlow instance goes down.

Pre-requisites for setting up Failover server

Ensure that the following conditions are satisfied:

• Apply the failover add-on: Apply the Failover - Hot Standby Engine (MSSQL and Remote PGSQL) add-on in your primary instance. You can purchase the add-on for Netflow Analyzer from here.
• Have the database in a separate server: Ensure that the database for your NetflowAnalyzer installation is setup in a separate server (Not the same server in which primary or secondary Netflow Analyzer instance is installed).
• Create a shared folder in a separate server: Some data in Netflow Analyzer are stored in files which are present in the local directory. When failover is configured, instead of a local directory, these files are stored in a shared folder that is accessible by both primary and secondary servers . This ensures that there is no data loss when the secondary server takes over the monitoring process.
  Create a folder in a separate server and share it with both the primary and secondary servers. Ensure that both primary and secondary servers have access to the shared folder with write permission.
Note: The server in which the folder is created should be in the same domain in which your primary and secondary servers are configured. Also, the server in which the folder is created should not be the same server in which the primary or secondary instance is configured. Click here to learn how to share a folder with both primary and secondary instances.
• Have a virtual IP address: A Virtual IP address is a common IP address that is shared by both primary and secondary server on the same subnet. When the one server goes down, the virtual IP points to the other server.
• Hardware and software requirements
  • Both the primary and secondary instances should be installed in Windows systems. 
  • The same version of Netflow Analyzer should be installed in both servers.
  • Both primary and secondary Netflow Analyzer services should have the same port and protocol ( http / https ).
  • Both primary and secondary servers should have the same time and time zone.
  • Both primary and secondary servers should have the same hardware configurations.
• Network requirements
  • Both primary and secondary servers should have a static IP address.
  • The virtual IP should be static and in IPv4 format.
  • The primary server and secondary server should be able to resolve each other's host name and IP address.
  • The IP and virtual IP of both the primary and secondary servers should belong to the same subnet.
  • Both the servers should have high connectivity and bandwidth.
  • The primary, secondary and the server in which the shared folder is created should all be in the same domain.
  • The Syslogs, SNMP traps and Flows are forwarded to the virtual IP address.

How to configure failover instance in Netflow Analyzer?

In your primary instance, go to Settings -> Congfiguration  -> Failover Server and enter the following details:

• Secondary Server IP: The IP address or host name of your secondary server.
• Shared folder path:The path to the empty shared folder created in a separate server. This is generally of the form \\<Server_Name_or_IP>\<Share_Name>.
  Note: Ensure that the empty folder is shared with both primary and secondary servers. Click here to learn how to share the folder with primary and secondary servers.
• Virtual IP: The virtual IP address. Refer to the pre-requisites to know more about Virtual IP Address.
• Subnet mask (optional): The subnet mask is used to bind the Virtual IP. By default, it is typically set to 255.255.255.0. If the failover configuration is completed before adding the subnet mask value, follow this link for instructions on how to change it.
• Email address (optional): Receive notifications on failover self monitoring alerts, data synchronization alerts and secondary server takeover alerts. You can specify the email recipients to whom the notifications must be sent. You can specify multiple recipients by separating each email address by a comma.

Save the details and perform the following steps in the primary and secondary servers:

In the primary server:

• Stop Netflow Analyzer service
• Share the <OpManagerHome> folder to the secondary server. Click here to learn how.
• Open command prompt / terminal with administrator priviliges, navigate to <OpManagerHome>\bin and execute the following command:
       Clone_primary_server.bat
• Start the Netflow Analyzer service.

In the secondary server:

• Download the Configure_failover_server.bat file and move it to the folder where you wish to have your secondary instance configured.
• Run the Configure_failover_server.bat file.
• Share the <OpManagerHome> folder to the primary server. Click here to learn how.
• Start the secondary Netflow Analyzer instance.

Upgrading the failover setup:

While upgrading your Netflow Analyzer service, it is enough to apply the PPM for the primary setup. The secondary server will be updated automatically.

Encrypted File transfer

In Virtual IP Based Failover, the configuration files in primary and secondary setup will be synced periodically. From version 127189, Encrypted File transfer between Primary and Secondary server will be supported. Please contact our support team to enable it.

Change the subnet mask:

If the customer has already configured failover and wants to change subnet mask, follow the below steps,

• Stop both primary and secondary services.
• Go to itom_fos.conf under <NetflowAnalyzer>\conf directory, and modify the subnet mask value in the following key: publicIP.netmask (this has to be done in both primary and secondary servers)
• Start the primary service completely, and once it is connected to UI, start the secondary service.