IdP statelessclustering, memcached, other options?

[Peter Schober]

Jeff,

I had the same experiences and currently still run the exact same
setup (except for the loadbalancer vendor) for much the same reasons.

* Jeffrey Eaton <jeaton at cmu.edu> [2011-08-15 21:52]:
> So, I'm looking at the options.

I wrote up a small document with all (well, most) the variants of
running an IdP service I could think of, by increasing complexity of
the setup. Hopefully I'll get around to adding it to the wiki (or
wherever) some time next week. Nothing really new, of course.

> Second there is  Manual Haim's Memcached StorageService, which may
> be able to be used with repcached to provide shared state.  Is
> anyone using this in production, either with or without repcached?

Except Manuel, you mean? I doubt it as this has only been available
for a couple of weeks now.
The "partitioned failure" scenario Manuel mentioned reminded me of the
Cyrus Murder design (without replication), so may be "good enough" but
introduces new dependencies, so might be more fragile.

> Second, there is the IdPStatelessClustering page in the wiki.

Same here, I suppose, i.e., I don't expect production use outside of
OSU yet. But with Scott releasing the login handler code (Thanks
Scott!) this may change soon. At least it's next on my list wrt Shib,
once I clear out some of the backlog after being offline for a couple
weeks.
-peter