Enter combined with a High Availability (HA) Tunnel setup. While standard Realm Host provides a robust, cross-platform (Windows, macOS, Linux) reverse proxy and tunnel solution, the "V2 HA Tunnel" architecture elevates it into carrier-grade territory.
Start small: set up the active-passive HA described in this article over a weekend. Once you experience a transparent failover—where your curl command continues streaming data despite one server being yanked offline—you will never go back to standalone tunnels.
sudo apt install keepalived ( /etc/keepalived/keepalived.conf ): realm host v2 ha tunnel
, use state BACKUP and priority 100 . This ensures the VIP floats only to the node where the Realm daemon is healthy. Step 4: Systemd Service for Automatic Restarts Create /etc/systemd/system/realm-ha.service :
[Install] WantedBy=multi-user.target
Note: In a true HA setup, 0.0.0.0:8443 is bound on all nodes, but only the VIP owner routes traffic. Install Keepalived on both nodes:
[Unit] Description=Realm Host V2 HA Tunnel After=network-online.target etcd.service keepalived.service [Service] Type=simple User=realm Group=realm ExecStartPre=/bin/mkdir -p /var/log/realm ExecStart=/usr/local/bin/realm -c /etc/realm/config.toml Restart=on-failure RestartSec=10 LimitNOFILE=65536 Enter combined with a High Availability (HA) Tunnel setup
vrrp_instance VI_1 state MASTER interface eth0 virtual_router_id 51 priority 101 advert_int 1 authentication auth_type PASS auth_pass realmHA2024 virtual_ipaddress 203.0.113.10/24 dev eth0 label eth0:vip track_script chk_realm