Service Redundancy in Multisite Georedundant Deployments

8 Service Redundancy in Multisite Georedundant Deployments

Georedundancy is data replication of one site across multiple sites to efficiently handle failure scenarios and ensure High Availability (HA).

Prerequisites

If any georedundant OCNADD sites experience a failure, manual failover procedures can be performed to move NF traffic from the failed site to the available OCNADD site.

The OCNADD instances and NF producers (SCP, NRF, SEPP) are in present in different CNE K8s clusters.
OCNADD instances should be deployed with similar configuration on each site

Note:

Only the 9094(SASL_SSL) port is exposed.

Manual Failover Procedures

SCP changes to route traffic to available OCNADD site

To route traffic to the live OCNADD site:

Recreate the ocscpdd-secret and ocscpddsasl-secret from the certificates and keys of the available OCNADD site, see, "Configuring SSL or TLS Certificates to Enable HTTP" and "Global Parameters" (ddSaslConfiguration and ddSslConfiguration) sections in the Oracle Communications Cloud Native Core, Service Communication Proxy Installation, Upgrade, and Fault Recovery Guide.
To enable or disable the traffic feed, see "Configuring Traffic Feed" section in the Oracle Communications Cloud Native Core, Service Communication Proxy User Guide .

NRF changes to route traffic to available OCNADD site

To route traffic to the live OCNADD site:

To enable the traffic feed and to recreate ocingress-secret, ocegress-secret, ocegress-secret-sasl , and ocingress-secret-sasl from the certificates and keys of the available OCNADD site, see, "Managing NRF Message Feed Feature" section in the Oracle Communications Cloud Native Core, Network Repository Function User Guide.

SEPP changes to route traffic to available OCNADD site

To route traffic to the live OCNADD site:

To enable the traffic feed and to recreate ocsepp-plmn-secret, ocsepp-n32-secret, and message-copy-secret from the certificates and keys of the available OCNADD site, see "NF Authentication using TLS certificate" and "Managing SEPP Message Feed Feature" sections in the Oracle Communications Cloud Native Core, Security Edge Protection Proxy User Guide Section.

Changes on BSF NF to Allow Traffic to Available OCNADD Sites:

To enable the traffic feed, to route traffic to the live OCNADD site, and to recreate ocingress-secret, ocegress-secret, ocegress-secret-sasl, and ocingress-secret-sasl from the certificates and keys of available OCNADD site, see Oracle Communications Cloud Native Core, Binding Support Function User Guide, section "Managing BSF Message Feed Feature".

Changes on PCF NF to Allow Traffic to Available OCNADD Sites:

To enable the traffic feed, to route traffic to the live OCNADD site, and to recreate ocingress-secret, ocegress-secret, ocegress-secret-sasl, and ocingress-secret-sasl from the certificates and keys of available OCNADD site, see Oracle Communications Cloud Native Core, Policy Charging Function User Guide, section "Managing PCF Message Feed Feature".