<div dir="ltr">In our environment, we've seen sticky sessions fail in ~5% of requests. We generally avoid it. I'll play around with the clustering to see how it works.<br><br><div class="gmail_quote"><div dir="ltr">On Wed, Aug 3, 2016 at 7:50 PM Bill Burke <<a href="mailto:bburke@redhat.com">bburke@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>you don't need session replication, just load balancer sticky
sessions. Basically the HTTP load balancer sets a cookie when you
visit for the first time. Based on that cookie the load balancer
knows which machine you are "stuck" on and will continually route
the browser to that same machine.<br>
</p></div><div bgcolor="#FFFFFF" text="#000000">
<br>
<div>On 8/3/16 7:04 PM, John D. Ament wrote:<br>
</div>
<blockquote type="cite">
<p dir="ltr">Mmmph ok. Do you know how quickly sessions replicate
now? Last time I did this it was about a minute which didn't
perform well for me. This is going back at least 6 years
though.</p>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Aug 3, 2016 18:50, "Bill Burke" <<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>I think SAML would be ok so long as you have sticky
sessions enabled with your load balancer.<br>
</p>
<br>
<div>On 8/3/16 6:07 PM, John D. Ament wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Thanks Bill. What if I'm primarily using
SAML? Same session issue?
<div><br>
</div>
<div>John<br>
<br>
<div class="gmail_quote">
<div dir="ltr">On Wed, Aug 3, 2016 at 5:17 PM Bill
Burke <<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>It is required. The auth code flow for
OAuth is an out of band HTTP request so you
may be loadbalanced to a machine that
doesn't have the user session. We have
"sticky sessions" for out of band requests
like this planned, but not implemented yet.<br>
</p>
</div>
<div bgcolor="#FFFFFF" text="#000000"> <br>
<div>On 8/3/16 4:55 PM, John D. Ament wrote:<br>
</div>
</div>
<div bgcolor="#FFFFFF" text="#000000">
<blockquote type="cite">
<div dir="ltr">Hey,
<div><br>
</div>
<div>I was wondering, is clustering
actually required on the keycloak server
if I have multiple deployed? Or will it
read data from the database?</div>
<div><br>
</div>
<div>John</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
</div>
<div bgcolor="#FFFFFF" text="#000000">
<blockquote type="cite">
<pre>_______________________________________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</div>
_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></blockquote>
</div>
</div>
</div>
</blockquote>
<br>
</div>
</blockquote>
</div>
</div>
</blockquote>
<br>
</div></blockquote></div></div>