Problem with SOAP call to 2.4.4 IdP / port 8443 / F5 load balancer

[Brent Putman]

On 11/11/15 10:57 PM, Benji Wakely wrote:
>
> 	- Not possible to Simply load balance this and keep Attribute Query functionality.

Well, you referenced the IdPStatelessClustering page below.  That has a
pointer to how to do stateless clustering with support for attribute
query using the -CryptoTransient- components (see bottom of that
page).  If all you need to support is attribute query, that's probably
the preferred and easiest solution.


> 	   Can use Terracotta.  Varying reports of Terracotta being a Pain.

Yes, it is a Big Pain.  We don't recommend it anymore, and it's not
supported in 3.x.  Don't use it.


> 	- Better option would be to use memcache as detailed below.
> 	   References / reading: https://wiki.shibboleth.net/confluence/display/SHIB2/IdPStatelessClustering
> 				https://wiki.shibboleth.net/confluence/display/SHIB2/Memcached+StorageService

Per the above the crypto transient is the best if you can live with the
limitations of the stateless solution.  If not, then I believe many
have had good results with the memcached route (I personally can't
speak to it).



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151111/e9b45063/attachment.html>