Load-balancing keystone

Keystone is a single-threaded service that can benefit from some tuning and scaling when done properly. To run HAProxy on the same node as the API services, the API services will have to be told not to listen on all IP addresses on the node. Edit your /etc/keystone/keystone.cfg file and change the public_bind_host and admin_bind_host options from to the internal IP address of the node. If these are commented out, just uncomment them and set them to the internal IP address of your control node.


Configuration changes from here on made to OpenStack components in configuration files, or in the database, are subject to be overwritten by Packstack with original answer file values if you run Packstack again.

public_bind_host= ...

Get OpenStack Essentials now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.