Solace PubSub HA with DMR and Replication

Access Points

All IPs and ports are reachable from docker host

OpenTofu

Use LB1 and LB2 to manage each HA group

terraform {
  required_providers {
    solacebroker = {
      source  = "SolaceProducts/solacebroker"
      version = "1.3.0"
    }
  }
}

provider "solacebroker" {
  alias    = "ha1"
  username = "tofudo"
  password = "TôFûDô"
  url      = "https://lb1.ifri.akl:1943"   # lb1.ifri.akl listed in SANs
}

provider "solacebroker" {
  alias    = "ha2"
  username = "tofudo"
  password = "TôFûDô"
  url      = "https://lb2.ifri.akl:1943"   # lb2.ifri.akl listed in SANs
}  
Resources
The OpenTofu configuration provisions two Message VPNs:








VPN
Replication
Use Case




test-infra-vpn
✅ Enabled
Disaster recovery (DR) – messages replicated to standby site


test_team_orag
❌ Disabled
DMR‑only – clients can connect to either site, DMR routes
messages



OpenTofu created resources: VPNs, client profiles, ACLs, client
usernames, DMR cluster links, and replicated topic subscription.
solacebroker_dmr_cluster.cluster_ha1
solacebroker_dmr_cluster.cluster_ha2
solacebroker_dmr_cluster_link.link_primary1_to_primary2
solacebroker_dmr_cluster_link.link_primary2_to_primary1
solacebroker_msg_vpn.test_infra_p1
solacebroker_msg_vpn.test_infra_p2
solacebroker_msg_vpn.test_team_orag_p1
solacebroker_msg_vpn.test_team_orag_p2
solacebroker_msg_vpn_acl_profile.test_infra_acl_p1
solacebroker_msg_vpn_acl_profile.test_infra_acl_p2
solacebroker_msg_vpn_acl_profile.test_team_orag_acl_p1
solacebroker_msg_vpn_acl_profile.test_team_orag_acl_p2
solacebroker_msg_vpn_client_profile.test_infra_profile01_p1
solacebroker_msg_vpn_client_profile.test_infra_profile01_p2
solacebroker_msg_vpn_client_profile.test_infra_profile02_p1
solacebroker_msg_vpn_client_profile.test_infra_profile02_p2
solacebroker_msg_vpn_client_profile.test_team_orag_profile01_p1
solacebroker_msg_vpn_client_profile.test_team_orag_profile01_p2
solacebroker_msg_vpn_client_profile.test_team_orag_profile02_p1
solacebroker_msg_vpn_client_profile.test_team_orag_profile02_p2
solacebroker_msg_vpn_client_username.infra_test_bridge_p1
solacebroker_msg_vpn_client_username.infra_test_bridge_p2
solacebroker_msg_vpn_client_username.infra_test_client_p1
solacebroker_msg_vpn_client_username.infra_test_client_p2
solacebroker_msg_vpn_client_username.test_team_orag_bridge_p1
solacebroker_msg_vpn_client_username.test_team_orag_bridge_p2
solacebroker_msg_vpn_client_username.test_team_orag_client_p1
solacebroker_msg_vpn_client_username.test_team_orag_client_p2
solacebroker_msg_vpn_replicated_topic.replicate_all_p1

DMR cluster status
primary1> show cluster mytfcluster link #ACTIVE channel

Cluster Name          : mytfcluster
Node Name             : primary1

Remote Node Name : #ACTIVE

Channel VPN                    Address               Oper Fail Reason / Uptime
------------------------------ --------------------- ---- ---------------------
#cluster                       127.55.55.55:55555    Up   0d 0h 15m 13s

primary1> show cluster mytfcluster link primary2 channel 

Cluster Name          : mytfcluster
Node Name             : primary1

Remote Node Name : primary2

Channel VPN                    Address               Oper Fail Reason / Uptime
------------------------------ --------------------- ---- ---------------------
default                        172.21.0.30:60140     Up   0d 0h 12m 9s
#cluster                       172.21.0.30:40884     Up   0d 0h 14m 42s


Note: Solace Terraform provider is generally
available for production services contained within a Message VPN. Use of
any resource not contained within a Message VPN is not supported in
production.

Tests
stm cli
stm -h
Commands:
  send [options]        Execute a send command
  receive [options]     Execute a receive command
  request [options]     Execute a request command
  reply [options]       Execute a reply command
  config [options]      Manage command configurations
  manage [options]      Manage broker connection and resources
  feed                  Manage event feeds

Examples:
stm receive --topic solace/try/me --config test-infra-config
stm send  --topic solace/try/me -m "Hello World!" --config test-infra-config

Python
Publisher process:
python direct_publisher.py 
Messaging Service connected? True
Direct Publisher ready? True

Send a KeyboardInterrupt to stop publishing

Published message on topic : solace/samples/python/direct/pub/1 
Published message on topic : solace/samples/python/direct/pub/2 
Published message on topic : solace/samples/python/direct/pub/3 
Published message on topic : solace/samples/python/direct/pub/4 
Published message on topic : solace/samples/python/direct/pub/5 

Receiver process:
python direct_receiver.py 
Messaging Service connected? True
Direct Receiver is running? True
Subscribing to: ['solace/samples/python/>']

Message Payload String: this is the body of the msg + 1 


Message Topic: solace/samples/python/direct/pub/1 


Message dump: Destination:                            Topic 'solace/samples/python/direct/pub/1'
ApplicationMessageId:                   NEW 1
Priority:                               4
Class Of Service:                       COS_1
DeliveryMode:                           DIRECT
DMQ Eligible                            
User Property Map:                      
  Key 'application' (STRING) samples
  Key 'language' (STRING) Python
Binary Attachment String:               len=31
  74 68 69 73 20 69 73 20  74 68 65 20 62 6f 64 79      this is    the body
  20 6f 66 20 74 68 65 20  6d 73 67 20 2b 20 31          of the    msg + 1

TLS and cert auth
TLS test using client user testclient created by
OpenTofu (testclient.crt/testclient.key)
export SOLACE_VPN=test-infra-vpn
export SOLACE_HOST=tcps://172.21.0.20:55443

python TLS_connection.py 

Message Payload String: {'solace.messaging.transport.host': 'tcps://172.21.0.20:55443', 'solace.messaging.service.vpn-name': 'test-infra-vpn'} 

Messaging Service connected? True
Direct Receiver is running? True
Subscribing to: ['solace/samples/python/dir/sub/>', 'solace/samples/python/dir/sub/v2/>', 'solace/samples/>']


Message Payload String: this is the body of the msg + 1 


Message Topic: solace/samples/python/direct/pub/1 


Message dump: Destination:                            Topic 'solace/samples/python/direct/pub/1'
ApplicationMessageId:                   NEW 1
Priority:                               4
Class Of Service:                       COS_1
DeliveryMode:                           DIRECT
DMQ Eligible                            
User Property Map:                      
  Key 'application' (STRING) samples
  Key 'language' (STRING) Python
Binary Attachment String:               len=31
  74 68 69 73 20 69 73 20  74 68 65 20 62 6f 64 79      this is    the body
  20 6f 66 20 74 68 65 20  6d 73 67 20 2b 20 31          of the    msg + 1
 
Message Payload String: this is the body of the msg + 2