[keycloak-user] Max number of Realms supported each keycloak instance/node

[Stian Thorgersen]

Limitation in number of realms is due to the fact it was never optimized to
work with large number of realms. So there's some bad queries, some work in
admin console and some improvements needed to migration code to support
larger number of realms.

On Wed, 30 Oct 2019, 15:34 Piotr Jander, <pjander2 at gmail.com> wrote:

> In fact, I have a related use case and related question.
>
> What does the limit of ~100 realms per KeyCloak instance mean for clustered
> deployments of Keycloak?
>
> I understand that a Keycloak cluster is a set of Keycloak instances which
> share a database. Does it mean that the limit of 100 realms pertains to the
> shared database, and that adding more instances will not solve this?
>
> Or it there a way to overcome this limit of 100 realms by adding instances
> to a Keycloak cluster?
>
> I understand that one workaround would be to have multiple clusters, and a
> load balancer which forwards requests based on the realm name in the URL
> path. But I would like to avoid this if possible.
>
> On Tue, Oct 29, 2019 at 4:14 PM Vishnu Prakash <vishnuprakash323 at gmail.com
> >
> wrote:
>
> > Hi,
> >    Is it possible to support more than 100 realms, by running keycloak in
> > high availability mode. Or there also we need to restrict the realms
> below
> > 100?
> > Currently we are building a cloud based multitenant SAAS application in
> > which we are planning to use Keycloak for Identity and Access Management.
> > We thought of  segregating
> > tenants using realm. If we proceed in this way, will that be a bottleneck
> > in future.
> >
> > Thanks & Regards,
> > Vishnu Prakash
> >
> >
> >
> > On Fri, Oct 25, 2019 at 5:30 AM Nagendra Darla <dvv.nagendra at gmail.com>
> > wrote:
> >
> > > Thank you so much Jan!
> > >
> > > On Thu, Oct 24, 2019 at 11:13 AM Jan Lieskovsky <jlieskov at redhat.com>
> > > wrote:
> > >
> > > > Hello Nagendra,
> > > >
> > > > On Thu, Oct 24, 2019 at 7:12 PM Nagendra Darla <
> dvv.nagendra at gmail.com
> > >
> > > > wrote:
> > > >
> > > >> Hello All,
> > > >>
> > > >> Can someone help me with my question?
> > > >>
> > > >> Thank you.
> > > >>
> > > >> On Wed, Oct 16, 2019 at 4:26 PM Nagendra Darla <
> > dvv.nagendra at gmail.com>
> > > >> wrote:
> > > >>
> > > >> > Hello All,
> > > >> >
> > > >> > I wondering if we have any documentation or suggestion on maximum
> > > number
> > > >> > of realms that can be created on a keycloak instance. If it is
> bases
> > > on
> > > >> > hardware configuration then is there any reference configuration
> > > >> > mentioned anywhere in keycloak documentation ?
> > > >>
> > > >
> > > > AFAICT the maximum number of realms, supported per one Keycloak
> > instance
> > > > is not documented
> > > > (as of right now) in the documentation. The reason for that being a
> > > > prosaic one - it is not possible
> > > > in the universal case to specify the maximum number of realms, that
> can
> > > be
> > > > supported, as this
> > > > depends on many factors (HW used, count of CPUs / vCPUs, memory, the
> > load
> > > > of the Keycloak
> > > > server itself).
> > > >
> > > > Although, so far we know, a performance degradation was observed
> having
> > > an
> > > > ordinary Keycloak
> > > > instance, having more than 100+ realms. There's an existing JIRA
> > > > <https://issues.jboss.org/browse/KEYCLOAK-4593> to improve this
> > > (increase
> > > > the count of realms, Keycloak server can handle gracefully without
> > > > performance penalties).
> > > >
> > > > Therefore, the (so far) recommended setup would be to limit count of
> > > > realms to be less than 100
> > > > per one Keycloak server instance.
> > > >
> > > > >
> > > >> > Your help is much appreciated.
> > > >> >
> > > >> > Thank You,
> > > >> > Nagendra Darla
> > > >> >
> > > >>
> > > >>
> > > >> --
> > > >> Thank You,
> > > >> Nagendra Darla
> > > >>
> > > >
> > > > HTH
> > > >
> > > >
> > > > Regards, Jan
> > > > --
> > > > Jan iankko Lieskovsky / Keycloak / RH-SSO Team
> > > >
> > > >
> > >
> > > --
> > > Thank You,
> > > Nagendra Darla
> > > _______________________________________________
> > > keycloak-user mailing list
> > > keycloak-user at lists.jboss.org
> > > https://lists.jboss.org/mailman/listinfo/keycloak-user
> > >
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>