8 Service Redundancy in Multisite Georedundant Deployments

Georedundancy is the data replication of one site across multiple sites to efficiently handle failure scenarios and ensure High Availability (HA).

Prerequisites

If any georedundant OCNADD sites experience a failure, manual failover procedures can be performed to move NF traffic from the failed site to the available OCNADD site.

  • The OCNADD instances and NF producers (SCP, NRF, PCF, BSF, SEPP) are present in different CNE K8s clusters.
  • OCNADD instances should be deployed with similar configuration on each site.

Note:

Only the 9094 (SASL_SSL) port is exposed.

Manual Failover Procedure

Changes on SCP NF to allow traffic to the available OCNADD site:

  • Recreate the ocscpdd-secret and ocscpddsasl-secret from the certificates and keys of the available OCNADD site. See Oracle Communications Cloud Native Core, Service Communication Proxy Installation, Upgrade, and Fault Recovery Guide:
    • Section Configuring SSL or TLS Certificates to Enable HTTP
    • Section Global Parameters for ddSaslConfiguration and ddSslConfiguration
  • To enable/disable the traffic feed, see Configuring Traffic Feed section in the Oracle Communications Cloud Native Core, Service Communication Proxy User Guide.

Changes on NRF NF to allow traffic to the available OCNADD sites:

  • To enable the traffic feed and to recreate ocingress-secret, ocegress-secret, ocegress-secret-sasl, and ocingress-secret-sasl from the certificates and keys of the available OCNADD site, see the Managing NRF Message Feed Feature section in the Oracle Communications Cloud Native Core, Network Repository Function User Guide.

Changes on SEPP NF to allow traffic to the available OCNADD sites:

  • To enable the traffic feed and to recreate ocsepp-plmn-secret, ocsepp-n32-secret, and message-copy-secret from the certificates and keys of the available OCNADD site, see the NF Authentication using TLS certificate and Managing SEPP Message Feed Feature sections in the Oracle Communications Cloud Native Core, Security Edge Protection Proxy User Guide.

Changes on BSF NF to allow traffic to the available OCNADD sites:

  • To enable the traffic feed and to recreate ocingress-secret, ocegress-secret, ocegress-secret-sasl, and ocingress-secret-sasl from the certificates and keys of the available OCNADD site, see the Managing BSF Message Feed Feature section in the Oracle Communications Cloud Native Core, Binding Support Function User Guide.

Changes on PCF NF to allow traffic to the available OCNADD sites:

  • To enable the traffic feed and to recreate ocingress-secret, ocegress-secret, ocegress-secret-sasl, and ocingress-secret-sasl from the certificates and keys of the available OCNADD site, see the Managing PCF Message Feed Feature section in the Oracle Communications Cloud Native Core, Policy Charging Function User Guide.