Re: [keycloak-user] AWS ELB
I wonder if you completely disabled caching in configuration if that would work with no
additional changes. Obviously not ideal for performance.
We definitely are using jgroups for this though.
________________________________
From: John Bartko <john.bartko(a)drillinginfo.com>
Sent: Friday, August 4, 2017 10:18:45 AM
To: Veit Guna; keycloak-user(a)lists.jboss.org; Phillip Fleischer
Subject: Re: [keycloak-user] AWS ELB
I believe it is the case that either nodes must replicate the session cache, or the LB
must use some sort of session affinity.
________________________________
From: keycloak-user-bounces(a)lists.jboss.org <keycloak-user-bounces(a)lists.jboss.org>
on behalf of Phillip Fleischer <pcfleischer(a)outlook.com>
Sent: Friday, August 4, 2017 8:12:12 AM
To: Veit Guna; keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] AWS ELB
I believe this is pretty well documented somewhere.
Unless I recall incorrectly, Even with multiple node in standalone you still need
clustering setup for many operations. Since clustering uses multicast by default
you'll need to use jgroups backed by a database provider of some sort.
If you search around I believe this is all out on documentation you might need to search
jboss docs instead of keycloak though.
________________________________
From: keycloak-user-bounces(a)lists.jboss.org <keycloak-user-bounces(a)lists.jboss.org>
on behalf of Veit Guna <veit.guna(a)gmx.de>
Sent: Friday, August 4, 2017 8:05:38 AM
To: keycloak-user(a)lists.jboss.org
Subject: [keycloak-user] AWS ELB
Hi.
My company plans to use KC for central authentication and authorization
for multiple microservice backends and frontends.
Since all our services are running on AWS, we're wondering whether it is
a problem to use the AWS ELBs and not the wildfly clustering.
So my question is, is it a requirement to use the wildfly clustering
capabilities to be able to get a working, scalable KC?
What might not work or even break if we just load balance against
isolated KC instances which maybe share the same storage/db?
Thanks!
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user