<div dir="ltr">Yes, that's needed. JGroups is by default bound to 127.0.0.1 and should in best practice be bound to a private secure network to limit access. See <a href="https://keycloak.gitbooks.io/server-installation-and-configuration/content/topics/clustering/multicast.html">https://keycloak.gitbooks.io/server-installation-and-configuration/content/topics/clustering/multicast.html</a> for more details.</div><div class="gmail_extra"><br><div class="gmail_quote">On 21 September 2016 at 16:35, Muein Muzamil <span dir="ltr"><<a href="mailto:shmuein+keycloak-dev@gmail.com" target="_blank">shmuein+keycloak-dev@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi all,<div><br></div><div>I am trying to run KeyCloak in cluster mode with docker containers using standalone-ha.xml but for me containers are not joining the same infinispan cluster. </div><div><br></div><div><br></div><div><div>I tried to follow following blog entry but not sure it is still valid. <a href="http://blog.keycloak.org/2015/04/running-keycloak-cluster-with-docker.html" target="_blank">http://blog.keycloak.org/2015/<wbr>04/running-keycloak-cluster-<wbr>with-docker.html</a></div><div><br></div><div><br></div><div>I was trying to follow this to run multiple docker containers in cluster with the latest images. But when I ran second keycloak container, I didn't see this container joining the 1st cluster. I was seeing this in the log for the second container.</div><div><br></div><div>[0m[0m12:31:56,385 INFO [org.infinispan.remoting.<wbr>transport.jgroups.<wbr>JGroupsTransport] (MSC service thread 1-2) ISPN000094: Received new cluster view for channel keycloak: [saskeycloak-fbtit|0] (1) [saskeycloak-fbtit] </div><div><br></div><div><br></div><div>To get it working I had to update private interface in standalone-ha.xml to use docker container's IP. </div><div> </div><div><interface name="private"></div><div> <!--<inet-address value="${jboss.bind.address.<wbr>private:127.0.0.1}"/>--></div><div> <inet-address value="172.17.0.3" /></div><div></interface></div><div><br></div><div>Is that really needed or do we have a better way to get it working?</div></div><div><br></div><div>Regards,</div><div>Muein</div></div>
<br>______________________________<wbr>_________________<br>
keycloak-dev mailing list<br>
<a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/keycloak-dev</a><br></blockquote></div><br></div>