Recovery Kit for Route 53™ Requirements

Prior to installing and configuring the Recovery Kit for Route 53™, be sure your configuration meets the following requirements.

• AWS Command Line Interface (AWS CLI) must be installed on all EC2 instances. Refer to Installing AWS Command Line Interface” for installation information.

• Instances need to have an access to Amazon Route 53 service endpoint, route53.amazonaws.com, with HTTPS protocol. Please configure EC2 and the OS properly.

• Register an appropriate domain name for Amazon Route 53.

• In order for LifeKeeper to operate AWS, an IAM user or IAM role, the following access privilege is required. Attach an IAM role with appropriate privileges to the EC2 instance or register an IAM user with access to the root user’s AWS CLI profile. For more details on AWS IAM roles and the AWS CLI, see the AWS user guides, EC2™ IAM role and configure AWS CLI.
  • route53:GetChange
  • route53:ListHostedZones
  • route53:ChangeResourceRecordSets
  • route53:ListResourceRecordSets

• Make sure that your network configuration (a communication route between the client and the VPC where the cluster nodes reside) satisfies the following requirements:
  1. The client can communicate with the physical IP address of each cluster node via the IP address
  2. The client can resolve the name of the A record registered in the Route 53 DNS server (the client is able to obtain the physical IP address from FQDN of the host name)

*Note: If the path name of AWS CLI executable files is not specified on the “PATH” parameter in the LifeKeeper defaults file /etc/default/LifeKeeper, you must append the path name of AWS CLI executable files to the “PATH” parameter.

*Note: This technical document is based on the assumption that when using Recovery Kit for Route 53, EC2 instances will be placed in different Availability Zones. From a fault tolerance perspective, we recommend placing EC2 instances in different Availability Zones. However, configurations where EC2 instances are placed in a single-AZ are also supported. To reduce the risk of simultaneous failures within a cluster, consider using a spread placement group for configurations that place instances in a single-AZ.

Instance Metadata Service (IMDS):

• To use this Recovery Kit, the Instance Metadata Service (IMDS) setting “Instance metadata service” for the EC2 instance must be enabled.

• In keeping with AWS security recommendations, SIOS recommends using IMDSv2 to access the instance metadata in an AWS EC2 environment.

LifeKeeper Software:

You need to install the same version of LifeKeeper software and patches on each server. For the specific LifeKeeper requirements, please refer to the Technical Documentation or the LifeKeeper for Linux Release Notes.

SIOS recommends using Quorum/Witness when using the Recovery Kit for Route 53™. Please refer to Quorum/Witness for more information.