Re: [keycloak-user] Max number of Realms supported each keycloak instance/node

In fact, I have a related use case and related question. What does the limit of ~100 realms per KeyCloak instance mean for clustered deployments of Keycloak? I understand that a Keycloak cluster is a set of Keycloak instances which share a database. Does it mean that the limit of 100 realms pertains to the shared database, and that adding more instances will not solve this? Or it there a way to overcome this limit of 100 realms by adding instances to a Keycloak cluster? I understand that one workaround would be to have multiple clusters, and a load balancer which forwards requests based on the realm name in the URL path. But I would like to avoid this if possible. On Tue, Oct 29, 2019 at 4:14 PM Vishnu Prakash <vishnuprakash323(a)gmail.com > wrote: > Hi, > Is it possible to support more than 100 realms, by running keycloak in > high availability mode. Or there also we need to restrict the realms below > 100? > Currently we are building a cloud based multitenant SAAS application in > which we are planning to use Keycloak for Identity and Access Management. > We thought of segregating > tenants using realm. If we proceed in this way, will that be a bottleneck > in future. > > Thanks & Regards, > Vishnu Prakash > > > > On Fri, Oct 25, 2019 at 5:30 AM Nagendra Darla <dvv.nagendra(a)gmail.com&gt; > wrote: > > > Thank you so much Jan! > > > > On Thu, Oct 24, 2019 at 11:13 AM Jan Lieskovsky <jlieskov(a)redhat.com&gt; > > wrote: > > > > > Hello Nagendra, > > > > > > On Thu, Oct 24, 2019 at 7:12 PM Nagendra Darla < dvv.nagendra(a)gmail.com > > > > > wrote: > > > > > >> Hello All, > > >> > > >> Can someone help me with my question? > > >> > > >> Thank you. > > >> > > >> On Wed, Oct 16, 2019 at 4:26 PM Nagendra Darla < > dvv.nagendra(a)gmail.com&gt; > > >> wrote: > > >> > > >> > Hello All, > > >> > > > >> > I wondering if we have any documentation or suggestion on maximum > > number > > >> > of realms that can be created on a keycloak instance. If it is bases > > on > > >> > hardware configuration then is there any reference configuration > > >> > mentioned anywhere in keycloak documentation ? > > >> > > > > > > AFAICT the maximum number of realms, supported per one Keycloak > instance > > > is not documented > > > (as of right now) in the documentation. The reason for that being a > > > prosaic one - it is not possible > > > in the universal case to specify the maximum number of realms, that can > > be > > > supported, as this > > > depends on many factors (HW used, count of CPUs / vCPUs, memory, the > load > > > of the Keycloak > > > server itself). > > > > > > Although, so far we know, a performance degradation was observed having > > an > > > ordinary Keycloak > > > instance, having more than 100+ realms. There's an existing JIRA > > > <https://issues.jboss.org/browse/KEYCLOAK-4593> to improve this > > (increase > > > the count of realms, Keycloak server can handle gracefully without > > > performance penalties). > > > > > > Therefore, the (so far) recommended setup would be to limit count of > > > realms to be less than 100 > > > per one Keycloak server instance. > > > > > > > > > >> > Your help is much appreciated. > > >> > > > >> > Thank You, > > >> > Nagendra Darla > > >> > > > >> > > >> > > >> -- > > >> Thank You, > > >> Nagendra Darla > > >> > > > > > > HTH > > > > > > > > > Regards, Jan > > > -- > > > Jan iankko Lieskovsky / Keycloak / RH-SSO Team > > > > > > > > > > -- > > Thank You, > > Nagendra Darla > > _______________________________________________ > > keycloak-user mailing list > > keycloak-user(a)lists.jboss.org > > https://lists.jboss.org/mailman/listinfo/keycloak-user > > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user > _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user