Configuring CCR In a Remote Leader Data Center

Ensure you have completed the necessary prerequisite steps before following the steps below.

This data center holds Liferay DXP cluster nodes with a read-write connection to a co-located Elasticsearch cluster.

The example shown here consists of a single Liferay DXP node and a single Elasticsearch node. The example configurations can also be found in the CCR configuration reference, including the security configuration settings.

Configure the Remote Leader Elasticsearch Cluster

In the example setup, the first Elasticsearch cluster to configure is a production-mode cluster with no CCR-specific configuration: it accepts reads and writes from its local Liferay DXP node, along with write requests from the Liferay DXP nodes that are in a separate data center.

Configure its elasticsearch.yml:

[Remote Elasticsearch Home]/config/elasticsearch.yml

cluster.name: LiferayElasticsearchCluster_LEADER
node.name: es-leader-node-1

http.port: 9200
transport.port: 9300

xpack.security.enabled: true

### TLS/SSL settings for Transport layer
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.keystore.path: certs/elastic-nodes.p12
xpack.security.transport.ssl.keystore.password: liferay
xpack.security.transport.ssl.truststore.path: certs/elastic-nodes.p12
xpack.security.transport.ssl.truststore.password: liferay
xpack.security.transport.ssl.verification_mode: certificate

## TLS/SSL settings for HTTP layer
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: certs/elastic-nodes.p12
xpack.security.http.ssl.keystore.password: liferay
xpack.security.http.ssl.truststore.path: certs/elastic-nodes.p12
xpack.security.http.ssl.truststore.password: liferay

# For Kibana
xpack.monitoring.collection.enabled: true

To use the security settings (xpack.security...) you must set up passwords and obtain node certificates. See Securing Elasticsearch for more information.

Start the server. If you’re in the root of the server directory, execute
```
./bin/elasticssearch
```

If you’re just trying this out and don’t yet have the proper license, start an Elasticsearch trial license:

POST /_license/start_trial?acknowledge=true

You’ll see a - valid message in your log when it installs successfully:

[2020-02-26T10:19:36,420][INFO ][o.e.l.LicenseService     ] [es-leader-node-1] license [lf263a315-8da3-41f7-8622-lfd7cc14cae29] mode [trial] - valid

Configure the Remote Liferay DXP Cluster Node

One of the Liferay DXP nodes in this setup reads and writes to/from the leader/remote Elasticsearch server.

Configure the Liferay Connector to Elasticsearch 7 by providing a configuration file in the Liferay Home/osgi/configs folder. Name it
```
com.liferay.portal.search.elasticsearch7.configuration.ElasticsearchConfiguration.config
```

Give it these contents:

For Liferay DXP 7.3:

productionModeEnabled="true"
remoteClusterConnectionId="remote"
logExceptionsOnly="false"

For Liferay DXP 7.2:

clusterName="LiferayElasticsearchCluster_LEADER"
operationMode="REMOTE"
transportAddresses=["localhost:9300"]
logExceptionsOnly="false"

tip

During development and testing, it’s useful to set logExceptionsOnly="false" in the configuration files.

Configure the remote connection.

For Liferay DXP 7.3, Provide a configuration file in the Liferay Home/osgi/configs folder named com.liferay.portal.search.elasticsearch7.configuration.ElasticsearchConnectionConfiguration-remote.config:

active=B"true"
connectionId="remote"
username="elastic"
password="liferay"
authenticationEnabled=B"true"
httpSSLEnabled=B"true"
networkHostAddresses=["https://localhost:9200"]
truststorePassword="liferay"
truststorePath="/PATH/TO/elastic-nodes.p12"
truststoreType="pkcs12"

important

The remoteClusterConnectionId value in the ElasticsearchConfiguration.config must match the connectionId in the ElasticsearchConnectionConfiguration-remote.config file.

For Liferay DXP 7.2, secure the connection by providing a configuration file named com.liferay.portal.search.elasticsearch7.configuration.XPackSecurityConfiguration.config with these contents:

certificateFormat="PKCS#12"
sslKeystorePath="/PATH/TO/elastic-nodes.p12"
sslKeystorePassword="liferay"
sslTruststorePath="/PATH/TO/elastic-nodes.p12"
sslTruststorePassword="liferay"
requiresAuthentication=B"true"
username="elastic"
password="liferay"
transportSSLVerificationMode="certificate"
transportSSLEnabled=B"true"

Copy these .config files to each follower DXP node, since they’ll use the same remote (write) connection. The read-only follower connection is configured separately in Configuring CCR in a Local/Follower Data Center.
Start the Liferay DXP server.

important

If you’re configuring a new DXP installation, make sure to reindex the spell check indexes at Control Panel > Configuration > Search, in the Index Actions tab.