Shib IDP v4 in Azure behind an Azure Load Balancer?

[Matthew Slowe]

> On 28 Apr 2021, at 16:03, Timothy Enders <tenders at loyola.edu> wrote:
> 
> We currently run two instances of Shib IDP v4 on premises behind a Kemp Loadmaster LB.
> 
> We are looking at shifting to running our IDP nodes in the Azure cloud, behind an Azure load balancer. I've gone through a lot of reading on the Azure LBs, but I'm still getting my feet under me there.
> 
> Has anyone else done this? What are the gotchas?

Yes, and not really -- just make sure you have Session stickiness enabled on the Load Balancer. You can also get it to call the .../status handler as an active service check too.

If you're already Load Balancing then I doubt you'll need to worry about the backchannel-type requests hitting the same node (you probably don't support that now!).

-- 
Matthew Slowe (GPG: 0x6BE0CF7D04600314)
Senior Technical Consultant and Support specialist - Trust & Identity, Jisc
Team: 0300 300 2212, option 2
Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG