Super Contributor.. JamesLindsay Super Contributor..
Super Contributor..
579 views

RAS Concenpt Question 10.x

Given a remote RAS server deployed in a network segment that is firewalled from it's central, what ports must be opened to/from the RAS and Central Server? Once those basic ports are opened, assuming the remote RAS has full connectivty to everything in its network, how does the request to run a flow end up running on the correct RAS?

Labels (1)
0 Likes
8 Replies
dani_c Respected Contributor.
Respected Contributor.

Re: RAS Concenpt Question 10.x

Hi! Starting with 10.60 version Ras can be installed in a firewall friendly manner. In this case RAS will initialize communication with Central and not the other way around as in normal RAS flavor. For more information see 10.60 documentation.
0 Likes
Super Contributor.. JamesLindsay Super Contributor..
Super Contributor..

Re: RAS Concenpt Question 10.x

Yes, but how does that remote RAS know that the flow run request belongs to it becasue the target host is in its network?

0 Likes
dani_c Respected Contributor.
Respected Contributor.

Re: RAS Concenpt Question 10.x

Hi James,

Each operation in OO is asigned by default to RAs_Operator_group alias that means that all operations run on the workers that are in this group. If you go in Topology on your Central You can see that by default all workers are assigned to this group. Though this group alias can be overriden. There are more ways to do that, one is to override it on authoring stage the other is to override it on running stage in central by adding a overrideJRAS (for java operations) or overrideNRAS (for .net operations) system properties with the value of the new Ras Group and after that assign the RAS worker to this group in the Topology page . For more information check Studio Guide, Group Aliases section.

BR,
Daniel
0 Likes
Super Contributor.. JamesLindsay Super Contributor..
Super Contributor..

Re: RAS Concenpt Question 10.x

Thank you for the explanation Daniel. Help me sort this out a bit more.

Lets say I have Central(1) with its local RAS(A), remote RAS(B), and another remote RAS(C) with firewalls between all. RAS(A) cannot run SSH operations on B or C, RAS(B) cannot run on A or C, etc. The SSH operation is used in a flow that is trggered when an incident/event is detected and/or found. The flows only input is the FQDN of the target system. For argurments sake let's say we happen to know that system resides in a network with RAS(B). How will RAS(B) know that it should run the flow and A or B should not?

0 Likes
dani_c Respected Contributor.
Respected Contributor.

Re: RAS Concenpt Question 10.x

Ok so the flow do you know that will always run only on RAS(B)? Or it depends, the same flow sometimes shiuld run on RAS(B) other times on RAS(C)?
If you know that the flow has to run only on RAS(B) then add another input on the flow called overrideJRAS (for ssh operation) and assign to it constant value: GROUP_B. After that deploy your flow in Central. In topology select RAS(B) and assign it to group: GROUP_B. In this way your flow will always run only on RAS(B).
If the flow has sometimes to run on RAS(B) and other times to run on RAS(C) (or another one) then make a logic inside the flow to assign the overrideJRAS property to either GROUP_B or GROUP_C or other one. In this case don't forget to assign each group to your RAS workers in topology.
Does this helps?
0 Likes
Super Contributor.. JamesLindsay Super Contributor..
Super Contributor..

Re: RAS Concenpt Question 10.x

No, you don't know that it will always run on B, it depends on target. It should be B only when the target is on the same network as B. If the target FQDN comes from A then A, B then B, C then C, etc. So what you are saying is that I have to create some subflow function to set the overrideJRAS value based on some criteria that defines the RAS selection (i.e. hostnname,domain,Ip address, etc.). That's pretty much what I thought, but was hoping HPOO10x could do some magic 🙂

0 Likes
mostafa_hassan Outstanding Contributor.
Outstanding Contributor.

Re: RAS Concenpt Question 10.x

Hello, 

 

That Video Explain Everything about "RAS, Worker, Worker Group, Group Alias" with demo.

https://www.youtube.com/watch?v=OkUZSf66AME&t=1151s 

Hope it be helpful

Regards
Mostafa Hassan
--------------------------------------
If my post helped you, kindly click the 'Kudos' button.
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: RAS Concenpt Question 10.x

Hi,

The magic you are referring to has to be created by the author since the case you are reffering to is far too specific in order to be handled out of the box.  Now in order to achieve the desired effect of  having the correct  RAS do the operation what daniel told you about worker groups is 100% correct and it will work. 

Now the tricky part is deciding which worker to run  which operation. This can be handled in a number of ways:

- you can have a subflow that pings the hostname from each of the ras-es and as soon as 1 ping works set the overrideNRAS/overrideJRAS (based on operation type) accordingly for the next step

- if you have a clear marker in the hostnames to figgure out which hostname is from which network, then you need a single step (do nothing) which based on the hostname has a scriptlet that will assign the overrideNRAS/JRAS  accordingly.

 

Now in order to eliminate the need to setup variables then clear them and so forth  whichever of the methods above you choose always work with a dummy variable not directly with the overrideNRAS/JRAS variables. What i mean by that is that on step 1 based on the hostname (whichever method you use) you set the override group as flowVarA, then on step 2 you add the input overrideJRAS or overrideNRAS (as needed by the operation) and set it to use the constant value of ${flowVarA}. By doing this you will enusre that only that specific step gets executed on the specific group and you do not have to clear the overrideJRAS/NRAS variable after each step, since the next time you need to make the decision the flowVarA variable will be overriden based on the new data fed to the step that creates the variable.

 

Hope this helps,

Vlad

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.