can't start percona cluster 8.019 for the first time.

MySQL & MariaDB Percona XtraDB Cluster 8.x
1

I setup percona xtra cluster and I tried to bootstrap my cluster for the first time, and this is my my.cnf of primary node :

# Template my.cnf for PXC

# Edit to your requirements.

[client]

socket=/var/lib/mysql/mysql.sock



[mysqld]

server-id=1

datadir=/var/lib/mysql

socket=/var/lib/mysql/mysql.sock

log-error=/var/log/mysqld.log

pid-file=/var/run/mysqld/mysqld.pid



#disable pxc-encrypt-cluster-traffic

# pxc-encrypt-cluster-traffic=OFF



user=mysql

Each node of the cluster must use the same SSL certificates, instructed by percona 8.0.12 menu

#wsrep_provider_options=“socket.ssl_key=server-key.pem;socket.ssl_cert=server cert.pem;socket.ssl_ca=ca.pem”



#[sst]

#encrypt=4

#ssl-key=server-key.pem

#ssl-ca=ca.pem

#ssl-cert=server-cert.pem



# Binary log expiration period is 604800 seconds, which equals 7 days
binlog_expire_logs_seconds=604800



######## wsrep ###############

# Path to Galera library

wsrep_provider=/usr/lib64/galera4/libgalera_smm.so

# Cluster name

wsrep_cluster_name=pxc-cluster

# Cluster connection URL contains IPs of nodes

#If no IP is found, this implies that a new cluster needs to be created,

#in order to do that you need to bootstrap this node

#wsrep_cluster_address=gcomm://

wsrep_cluster_address=gcomm://<node 1 IP>,<node 2 IP>,<node 3 IP>



default_storage_engine=InnoDB



# In order for Galera to work correctly binlog format should be ROW

binlog_format=ROW



# Slave thread to use

wsrep_slave_threads=8


wsrep_log_conflicts



# This changes how InnoDB autoincrement locks are managed and is a requirement for Galera
innodb_autoinc_lock_mode=2

Node IP address

wsrep_node_address=192.168.x.x
 


#If wsrep_node_name is not specified,  then system hostname will be used. Changed to the name of the host!

wsrep_node_name=perconanode1


#pxc_strict_mode allowed values: DISABLED,PERMISSIVE,ENFORCING,MASTER
pxc_strict_mode=ENFORCING



# SST method

wsrep_sst_method=xtrabackup-v2

and I bootstrap using:
  systemctl start mysql@bootstrap.service

the first node is ok but when second node just start and it expected to join the cluster automatically, but it can’t start with error message in the error log: /var/log/mysqld.log shown:

“
020-08-04T10:17:02.177175Z 0 [Note] [MY-000000] [Galera] PC protocol downgrade 1 -> 0
2020-08-04T10:17:02.177249Z 0 [Note] [MY-000000] [Galera] Current view of cluster as seen by this node
view ((empty))
2020-08-04T10:17:02.177444Z 0 [ERROR] [MY-000000] [Galera] failed to open gcomm backend connection: 110: failed to reach primary view (pc.wait_prim_timeout): 110 (Connection timed out)
    at gcomm/src/pc.cpp:connect():159
2020-08-04T10:17:02.177477Z 0 [ERROR] [MY-000000] [Galera] gcs/src/gcs_core.cpp:gcs_core_open():220: Failed to open backend connection: -110 (Connection timed out)
2020-08-04T10:17:02.177789Z 0 [ERROR] [MY-000000] [Galera] gcs/src/gcs.cpp:gcs_open():1700: Failed to open channel ‘pxc-cluster’ at ‘gcomm://<IP address of 3 x nodes>’: -110 (Connection timed out)
2020-08-04T10:17:02.177824Z 0 [ERROR] [MY-000000] [Galera] gcs connect failed: Connection timed out
2020-08-04T10:17:02.177854Z 0 [ERROR] [MY-000000] [WSREP] Provider/Node (gcomm://<IP address of 3 x nodes>) failed to establish connection with cluster (reason: 7)
2020-08-04T10:17:02.177880Z 0 [ERROR] [MY-010119] [Server] Aborting
2020-08-04T10:17:02.178213Z 0 [System] [MY-010910] [Server] /usr/sbin/mysqld: Shutdown complete (mysqld 8.0.19-10)  Percona XtraDB Cluster (GPL), Release rel10, Revision 727f180, WSREP version 26.4.3.
2020-08-04T10:17:02.178578Z 0 [Note] [MY-000000] [Galera] dtor state: CLOSED
2020-08-04T10:17:02.178630Z 0 [Note] [MY-000000] [Galera] MemPool(TrxHandleSlave): hit ratio: 0, misses: 0, in use: 0, in pool: 0
2020-08-04T10:17:02.181657Z 0 [Note] [MY-000000] [Galera] apply mon: entered 0
2020-08-04T10:17:02.184854Z 0 [Note] [MY-000000] [Galera] apply mon: entered 0
2020-08-04T10:17:02.188101Z 0 [Note] [MY-000000] [Galera] apply mon: entered 0
2020-08-04T10:17:02.188150Z 0 [Note] [MY-000000] [Galera] cert index usage at exit 0
2020-08-04T10:17:02.188165Z 0 [Note] [MY-000000] [Galera] cert trx map usage at exit 0
2020-08-04T10:17:02.188177Z 0 [Note] [MY-000000] [Galera] deps set usage at exit 0
2020-08-04T10:17:02.188198Z 0 [Note] [MY-000000] [Galera] avg deps dist 0
2020-08-04T10:17:02.188212Z 0 [Note] [MY-000000] [Galera] avg cert interval 0
2020-08-04T10:17:02.188224Z 0 [Note] [MY-000000] [Galera] cert index size 0
2020-08-04T10:17:02.188272Z 0 [Note] [MY-000000] [Galera] Service thread queue flushed.
2020-08-04T10:17:02.188313Z 0 [Note] [MY-000000] [Galera] wsdb trx map usage 0 conn query map usage 0
2020-08-04T10:17:02.188332Z 0 [Note] [MY-000000] [Galera] MemPool(LocalTrxHandle): hit ratio: 0, misses: 0, in use: 0, in pool: 0
2020-08-04T10:17:02.189323Z 0 [Note] [MY-000000] [Galera] Flushing memory map to disk…

”
why cluster can’t form?

when I was doing mariaDB everything is easy including my.cnf, but not for percona, very hard to form a cluster, any reason for it?

2

PXC-8.0 have pxc_encrypt_cluster_traffic enable by default, and you have in your config:
# pxc-encrypt-cluster-traffic=OFF

3

"PXC-8.0 have pxc_encrypt_cluster_traffic enable by default, "
if no specify , it will be ON ?
“and you have in your config:
# pxc-encrypt-cluster-traffic=OFF”
so should I make it ON or OFF ?


4

what I found out is I have to set it off, pxc-encrypt-cluster-traffic=OFF, it make it works! 
any idea? 
What if I want to make it on? this is the encryption between percona MySQL or between application and percona MySQL ?


5

If you want to make it, you will find help under this link : https://www.percona.com/doc/percona-xtradb-cluster/8.0/security/encrypt-traffic.html

6

but doing this can’t bootstrap the cluster at all, as you can see from my.cnf, I remark that.

wsrep_provider_options=”socket.ssl_key=server-key.pem;socket.ssl_cert=server-cert.pem;socket.ssl_ca=ca.pem”

[sst]
encrypt=4
ssl-key=server-key.pem
ssl-ca=ca.pem
ssl-cert=server-cert.pem<br>
7

sorry, my mistake

8

don’t use quotation mark 

wsrep_provider_options=socket.ssl_key=server-key.pem;socket.ssl_cert=server-cert.pem;socket.ssl_ca=ca.pem

9

as I said do not quote it can’t start at all.

I now has no problem by remark more and more parameter

10

this one close