Load Balancing Shibboleth

[Jason Rotunno]

Hi All,

We're currently running a single Shib 3.3.x IdP instance but we're planning
on setting up a second instance and load balancing them for high
availability.

For the most part, I assume they should be setup identically -- same
hostname, entityID, Metadata, signing cert, etc. Aside from different IPs,
the only other difference between them that I'm aware of is that the same
DataSealer key should be used on both hosts; in other words, they shouldn't
both be running a cron job to rotate the keys.

Is there anything else that should be unique to each host?

I've been reading some documentation on setting up an HA environment and I
realize that there are other factors that need to be considered; for
example, potentially making storage entities persistent (e.g. storing their
values in a database). But at this point, I'm just looking at the 'base'
IdP setup.

Thanks,
Jason


-- 

Jason Rotunno
System & Security Administrator
Swarthmore College
500 College Ave
Swarthmore, PA 19081
610.328.8505

Think BEFORE You Click!! Emails from Swarthmore College ITS won't be in your
Quarantine or Spam folder. We won't threaten you either! If you
receive any phishing emails, please forward them to phishing at swarthmore.edu.


<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=icon>
Virus-free.
www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=link>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171127/904876ca/attachment.html>