06.11.2024 Problem:
The client experienced issues setting up a second node for high availability in their OpenSearch cluster. While the first node worked properly, the second node encountered SSL handshake errors when both nodes were used simultaneously.
Process:
The expert reviewed the client’s YML configurations and SSL certificate setups. They provided detailed feedback on correcting SSL paths, eliminating white spaces in DN configurations, and ensuring consistent settings across both nodes. The expert also requested the client share specific logs and configurations to understand the issue better.
A meeting was scheduled where the expert guided the client through setting up a multi-node OpenSearch cluster. They emphasized the importance of proper SSL certificate configuration, correct YML settings, and the necessity of matching the environment’s node names. The expert also explained the data replication process and how to handle node failures.
Solution:
The expert provided the client with updated YML configuration files and scripts that were tested locally to ensure they worked with a two-node cluster. They highlighted the need for each node to be individually configured or to utilize advanced client driver settings for handling node failures. The expert also recommended distributing OpenSearch nodes across different hypervisor servers to prevent cluster downtime if one server fails.
Conclusion:
The solution provided by the expert was effective because it addressed the client’s immediate issue of SSL handshake errors by correcting configuration discrepancies and ensuring that the environment-specific settings were accurately reflected. By providing comprehensive guidance on setting up and managing a multi-node OpenSearch cluster, the expert not only resolved the current problem but also equipped the client with the knowledge to prevent similar issues in the future. The recommendation to distribute nodes across multiple hypervisors was added.