[keycloak-user] AWS ELB

[Phillip Fleischer]

I wonder if you completely disabled caching in configuration if that would work with no additional changes. Obviously not ideal for performance.

We definitely are using jgroups for this though.

________________________________
From: John Bartko <john.bartko at drillinginfo.com>
Sent: Friday, August 4, 2017 10:18:45 AM
To: Veit Guna; keycloak-user at lists.jboss.org; Phillip Fleischer
Subject: Re: [keycloak-user] AWS ELB

I believe it is the case that either nodes must replicate the session cache, or the LB must use some sort of session affinity.
________________________________
From: keycloak-user-bounces at lists.jboss.org <keycloak-user-bounces at lists.jboss.org> on behalf of Phillip Fleischer <pcfleischer at outlook.com>
Sent: Friday, August 4, 2017 8:12:12 AM
To: Veit Guna; keycloak-user at lists.jboss.org
Subject: Re: [keycloak-user] AWS ELB

I believe this is pretty well documented somewhere.

Unless I recall incorrectly, Even with multiple node in standalone you still need clustering setup for many operations. Since clustering uses multicast by default you'll need to use jgroups backed by a database provider of some sort.

If you search around I believe this is all out on documentation you might need to search jboss docs instead of keycloak though.



________________________________
From: keycloak-user-bounces at lists.jboss.org <keycloak-user-bounces at lists.jboss.org> on behalf of Veit Guna <veit.guna at gmx.de>
Sent: Friday, August 4, 2017 8:05:38 AM
To: keycloak-user at lists.jboss.org
Subject: [keycloak-user] AWS ELB

Hi.

My company plans to use KC for central authentication and authorization
for multiple microservice backends and frontends.
Since all our services are running on AWS, we're wondering whether it is
a problem to use the AWS ELBs and not the wildfly clustering.

So my question is, is it a requirement to use the wildfly clustering
capabilities to be able to get a working, scalable KC?
What might not work or even break if we just load balance against
isolated KC instances which maybe share the same storage/db?

Thanks!


_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user