MineMeld in HA

[andersonjd]

Does MineMeld come with any kind of HA facilities? Do you see any issues or can share any gotchas for puting a couple of instances with the same config behind a load ballencer? 

[lmori]

Hi andersonjd,

I can't see a problem with this config.

[bspilde]

Is there a way to export the configuration file? Or a location that I could setup rsync or something to keep the configuration updated on both "HA" boxes with a script?

Can HA just be built into the code? 🙂  Seems like if we were to depend on this for permitting access to something like O365 IP's it is something that we would want in an HA configuration.

Thanks!

[lmori]

Hi bsplide,

all the config is stored under /opt/minemeld/local/config as simple text (YAML) files.

You are right, we should work on a solution guide for MineMeld HA. Note that if PAN-OS can't access the EDL URL it will use the last retrieved version of the list.

[bspilde]

@lmori Would anything need to be restarted if the file were replaced in order to load the new config?

[lmori]

Yes, you should restart the MineMeld service if config has changed: sudo service minemeld restart

Thanks,
Luigi

[dkoh]

Hi Imori,

Is there any timeline for minemeld HA capability?

Thanks

Darren koh

---

@lmori wrote:
Yes, you should restart the MineMeld service if config has changed: sudo service minemeld restart

Thanks,
Luigi

---