Load-balancing keystone

Keystone is a single-threaded service that can benefit from some tuning and scaling when done properly. To run HAProxy on the same node as the API services, the API services will have to be told not to listen on all IP addresses on the node. Edit your /etc/keystone/keystone.cfg file and change the public_bind_host and admin_bind_host options from 0.0.0.0 to the internal IP address of the node. If these are commented out, just uncomment them and set them to the internal IP address of your control node.

Note

Configuration changes from here on made to OpenStack components in configuration files, or in the database, are subject to be overwritten by Packstack with original answer file values if you run Packstack again.

public_bind_host=192.168.123.101
admin_bind_host=192.168.123.101

Next, restart Keystone so that it sees the change:

control# service openstack-keystone restart

Now that Keystone is bound to a specific IP address, another IP address can be added to HAProxy to...