Managing ANS controllers

After deploying an ANS service, you can scale out the number of ANS controllers, scale up the resource configuration, edit the ANS controller worker nodes, or replace the ANS controller worker node or witness node.

Viewing the ANS controller information

1. Enter the AOC Network and security page, click Settings in the left sidebar, and select the ANS service.

2. Click Arcfra Network Service controller under Operations to view the following information:

   • Total number of ANS controller nodes, as well as the number of worker nodes and the witness node.
   • Configuration.
   • Information of each ANS controller worker node displayed by its associated cluster, as well as the total and usage rate of its vCPU, memory, and storage capacity.
   • Information of the ANS controller witness node.

Information:

If the total amount and usage of vCPUs, memory, and storage cannot be displayed, there are two possible reasons:

• The cluster to which the ANS controller worker nodes belong is not associated with Observability.

  When the collected monitoring data size in the cluster is about to reach the reserved resource limit for basic monitoring, some metrics of the virtual machines will stop being collected. Refer to the Deployment > Deploying Observability > Deployment steps > Deploying an observability service in a cluster section to deploy the observability service.

• An ANS controller worker node is abnormal.

  When the virtual machine status is Updating, Suspend, Shutdown, or Unknown, related metrics cannot be obtained. Restore the virtual machine to normal status first.

Scaling out the ANS controllers

You can scale out the number of ANS controllers as needed to improve the availability of the ANS service.

Before enabling the distributed firewall or the VPC networking feature, the number of ANS controller nodes needs to be increased to 3 or 5.

Precaution

The management IP addresses of the newly added ANS controller nodes must be able to connect with the management IP addresses of existing ANS controller nodes.

Procedure

1. Enter the AOC Network and security page, click Settings in the left sidebar, and select the ANS service.

2. Click Arcfra Network Service controller under Operations to enter the configuration page.

3. Click Scale out on the right of Arcfra Network Service controller count.

4. Refer to Configuring ANS controllers to configure the VM networks and management IP addresses for the newly added ANS controller nodes.

5. Click Save.

Scaling up the ANS controller configuration

To enable two or more features, you need to scale up the ANS controller configuration to at least Medium.

1. Enter the AOC Network and security page, click Settings in the left sidebar, and select the ANS service.

2. Click Arcfra Network Service controller under Operations to enter the configuration page.

3. Click Scale up on the right side of Configuration.

4. Select the configuration and click Save.

Editing the ANS controller worker nodes

1. Enter the AOC Network and security page, click Settings in the left sidebar, and select the ANS service.

2. Click Arcfra Network Service controller under Operations to enter the configuration page.

3. Click Edit in the upper-right corner of the cluster to which an ANS controller worker node belongs. You can then edit the subnet mask, gateway, as well as the VM networks and management IP addresses of all worker nodes in this cluster. Updating these configurations will cause a brief interruption to the management network of the ANS system service. For specific parameter descriptions, see Configuring ANS controllers.

   Information:

   When editing the ANS controller management IP addresses, it is recommended to keep the network segment of these management IP addresses strictly separated from that of the load balancer VIP address. This helps prevent potential network issues caused by route overlapping.

4. Click Save.

Replacing the ANS controller node

Replacing an ANS controller node means deleting the current node and creating a new one.

• When an ANS controller node fails and cannot be recovered, you can replace it in the current cluster while maintaining the same configurations. The system deletes the failed node and recreates an ANS controller node with the original configuration.

• To migrate ANS controllers to another cluster, you can replace the nodes one by one. During replacement, specify the target cluster information and the management IP addresses of the ANS controllers in the new cluster.

Precaution

• The management IP addresses of the ANS controller nodes after replacement must be able to connect with the management IP addresses of existing ANS controller nodes.

• To ensure the ANS service functions normally during node replacement, ensure that more than half of the ANS controller nodes, excluding the nodes to be replaced, remain operational.

Procedure

1. Enter the AOC Network and security page, click Settings in the left sidebar, and select the ANS service.

2. Click Arcfra Network Service controller under Operations to enter the configuration page.

3. Click ... > Replace node on the right of the node.

   • Replacing a worker node:

     • If an ANS controller witness node already exists, the new node after replacement is a worker node by default. You need to specify its cluster, IP address, subnet mask, VM network, and other information.
     • If no ANS controller witness node exists, the node after replacement can either be a worker node or a witness node. Complete the corresponding configuration as needed.

   • Replacing a witness node:

     You can select another existing witness node or replace the witness node with a worker node. Complete the corresponding configuration as needed.

4. Click Replace.

Restoring the ANS controller status

When the ANS controller synchronization status is abnormal, a message will appear at the top of the page. In this case, you can resynchronize and restore the status of the ANS controllers.

Procedure

1. Enter the AOC Network and security page, click Settings in the left sidebar, and select the ANS service.

2. Click Arcfra Network Service controller under Operations to enter the configuration page.

3. Click Recover to the right of the message that prompts The synchronization status is abnormal.