Problem with SOAP call to 2.4.4 IdP / port 8443 / F5 load balancer

[Christopher Bongaarts]

On 11/11/2015 10:28 PM, Brent Putman wrote:
> On 11/11/15 10:57 PM, Benji Wakely wrote:
>> 	- Not possible to Simply load balance this and keep Attribute Query functionality.
>
> Well, you referenced the IdPStatelessClustering page below.  That has 
> a pointer to how to do stateless clustering with support for attribute 
> query using the -CryptoTransient- components (see bottom of that 
> page).  If all you need to support is attribute query, that's probably 
> the preferred and easiest solution. 

Indeed, we use the crypto transients with our IdP behind an F5 LTM to 
much success, even for our one SP that actually uses attribute query.

FWIW, we are using a standard virtual server for both front and back 
channel, not the L4 performance ones.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%