[keycloak-user] Max number of Realms supported each keycloak instance/node

[Piotr Jander]

In fact, I have a related use case and related question.

What does the limit of ~100 realms per KeyCloak instance mean for clustered
deployments of Keycloak?

I understand that a Keycloak cluster is a set of Keycloak instances which
share a database. Does it mean that the limit of 100 realms pertains to the
shared database, and that adding more instances will not solve this?

Or it there a way to overcome this limit of 100 realms by adding instances
to a Keycloak cluster?

I understand that one workaround would be to have multiple clusters, and a
load balancer which forwards requests based on the realm name in the URL
path. But I would like to avoid this if possible.

On Tue, Oct 29, 2019 at 4:14 PM Vishnu Prakash <vishnuprakash323 at gmail.com>
wrote:

> Hi,
>    Is it possible to support more than 100 realms, by running keycloak in
> high availability mode. Or there also we need to restrict the realms below
> 100?
> Currently we are building a cloud based multitenant SAAS application in
> which we are planning to use Keycloak for Identity and Access Management.
> We thought of  segregating
> tenants using realm. If we proceed in this way, will that be a bottleneck
> in future.
>
> Thanks & Regards,
> Vishnu Prakash
>
>
>
> On Fri, Oct 25, 2019 at 5:30 AM Nagendra Darla <dvv.nagendra at gmail.com>
> wrote:
>
> > Thank you so much Jan!
> >
> > On Thu, Oct 24, 2019 at 11:13 AM Jan Lieskovsky <jlieskov at redhat.com>
> > wrote:
> >
> > > Hello Nagendra,
> > >
> > > On Thu, Oct 24, 2019 at 7:12 PM Nagendra Darla <dvv.nagendra at gmail.com
> >
> > > wrote:
> > >
> > >> Hello All,
> > >>
> > >> Can someone help me with my question?
> > >>
> > >> Thank you.
> > >>
> > >> On Wed, Oct 16, 2019 at 4:26 PM Nagendra Darla <
> dvv.nagendra at gmail.com>
> > >> wrote:
> > >>
> > >> > Hello All,
> > >> >
> > >> > I wondering if we have any documentation or suggestion on maximum
> > number
> > >> > of realms that can be created on a keycloak instance. If it is bases
> > on
> > >> > hardware configuration then is there any reference configuration
> > >> > mentioned anywhere in keycloak documentation ?
> > >>
> > >
> > > AFAICT the maximum number of realms, supported per one Keycloak
> instance
> > > is not documented
> > > (as of right now) in the documentation. The reason for that being a
> > > prosaic one - it is not possible
> > > in the universal case to specify the maximum number of realms, that can
> > be
> > > supported, as this
> > > depends on many factors (HW used, count of CPUs / vCPUs, memory, the
> load
> > > of the Keycloak
> > > server itself).
> > >
> > > Although, so far we know, a performance degradation was observed having
> > an
> > > ordinary Keycloak
> > > instance, having more than 100+ realms. There's an existing JIRA
> > > <https://issues.jboss.org/browse/KEYCLOAK-4593> to improve this
> > (increase
> > > the count of realms, Keycloak server can handle gracefully without
> > > performance penalties).
> > >
> > > Therefore, the (so far) recommended setup would be to limit count of
> > > realms to be less than 100
> > > per one Keycloak server instance.
> > >
> > > >
> > >> > Your help is much appreciated.
> > >> >
> > >> > Thank You,
> > >> > Nagendra Darla
> > >> >
> > >>
> > >>
> > >> --
> > >> Thank You,
> > >> Nagendra Darla
> > >>
> > >
> > > HTH
> > >
> > >
> > > Regards, Jan
> > > --
> > > Jan iankko Lieskovsky / Keycloak / RH-SSO Team
> > >
> > >
> >
> > --
> > Thank You,
> > Nagendra Darla
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>