Setting Up Load Balancer

  1. Open the navigation menu and select Networking. Then select Load Balancers.
  2. Create Load Balancer > Load Balancer > Create Load Balancer.
  3. Enter the following:In the Load Balancer Name field,
    Load Balancer Name
    Enter a name to identify the load balancer.
    Choose Visibility Type
    Select Private.
    Virtual Cloud Network
    Select the VCN used by the Big Data Service cluster.
    Subnet
    Select the same subnet used by the Big Data Service customer subnet.
  4. Select Next.
  5. Under Choose Backends, Select appropriate policy based on the need. See Load Balancer Policies. For example, Weighted Round Robin. Don't add backends at this point, this is completed in later step.
  6. Under Specify Health Check Policy, enter the following:
    Port
    Set port used by Ranger Admin. This value can be fetched using ranger.service.https.port from ranger-admin-site.xml or through the Ambari UI. Default is 6182 for HTTPS protocol.
    URL Path
    Enter /login.jsp.
  7. Check Use SSL.
  8. Select Load Balancer Managed Certificate as the Certificate Resource.
  9. Select Paste SSL Certificate.
  10. In the SSL Certificate box, paste certificate content from /etc/security/serverKeys/bdsOracleCA.crt. For public certificate authorities (CAs), the certificate can be obtained directly from their site. Its the root/CA certificate.
    Note

    Certificate content from this path can be obtained from any of the Big Data Service nodes.
  11. Check Specify CA Certificate.
  12. Select Paste SSL Certificate.
  13. In the SSL Certificate box, paste certificate content from /etc/security/serverKeys/bdsOracleCA.crt.
    Note

    Certificate content from this path can be obtained from any of the Big Data Service nodes.
  14. Under Backend Set Name, enter a name. For example, Ranger-Admin-Backends.
  15. Select Session Persistence.
  16. Select Enable application cookie persistence.
  17. For Cookie Name, enter *.
  18. Select Next.
  19. Enter a Listener Name. For example, Ranger-Admin-HA-Listener.
  20. For Specify the type of traffic your listener handles, select HTTPS and set port to 6182.
    See SSL Certificate Management for more information.
  21. Select Next.
  22. (Optional) Enable Error Logs.
  23. (Optional) Enable Access Logs.
  24. Select Submit.
  25. Under Resources, select Backend Sets.
  26. Select the newly created backend set. For example, Ranger-Admin-Backend.
  27. Under Resources, select Backends.
  28. Select Add Backend, and then select IP Addresses.
  29. In the IP Address field, enter the un0 subnet IP address. The IP address can be retrieved using any of the following methods:
    • From the OCI console.
      1. Open the navigation menu and select Analytics & AI. Under Data Lake, select Big Data Service.
      2. Select the cluster, and then under Resources, select Nodes.
      3. Look for the IP address with node names ending with un0.
    • Sign in to un0 node through a terminal and run ifconfig. Look for the IP that starts with same CIDR as customer subnet.
  30. In the Ports field, enter 6182 (the Ranger Admin port).
  31. Select Add.
  32. Complete steps 28-31 for additional Ranger Admin hosts (un1 or mn1 host IP).
  33. Go to Load Balancer Details page and copy the private IP of the load balancer.