Shibboleth in a load balancer enveiroment

[Cantor, Scott]

On 8/11/14, 9:46 AM, "Dave Perry" <Dave.Perry at hull-college.ac.uk> wrote:

>Your statement suggests that you want to be able to have a
>shibboleth-protected service running behind a load balancer ­ and as the
>shibboleth SP needs to run on each server behind the load balancer, you
>need to look at clustering it so each server has the same software/config
>and knows about the load balancer if you want to share the login status
>etc.

That depends on the load balancer. Some people use an Apache reverse proxy
as a load balancer, in which case it's possible in some cases to put the
SP on that server.

Otherwise, yes, they're generally synced across every server, but they
don't have to share login state unless you do non-sticky sessions and/or
actually maintain a session longer than a few minutes. An application
that's already clustered is likely to fall into one of those two
categories.

-- Scott