[EXTERNAL] Re: Shib IDP v4 in Azure behind an Azure Load Balancer?

[Timothy Enders]

Hi Matthew:

Thanks for the thoughts. It didn't look like there was anything immediately concerning, but I thought I'd ask.

Took me a few minutes to figure out changing the access-control.xml to allow calling that handler from other than the local console, but I think I've got it now.

Thanks again!
-Tim

Tim Enders
Senior Systems Engineer
[1518788691975_Loyola.jpg]
4501 N. Charles Street
Baltimore, MD  21210
tenders at loyola.edu<mailto:tenders at loyola.edu>
Office- 410-617-2542
Fax - 410-617-6658
www.loyola.edu
<http://www.twitter.com/LoyolaMaryland>

<http://www.twitter.com/LoyolaMaryland>

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Matthew Slowe via users <users at shibboleth.net>
Sent: Wednesday, April 28, 2021 11:07 AM
To: Shib Users <users at shibboleth.net>
Cc: Matthew Slowe <Matthew.Slowe at jisc.ac.uk>
Subject: [EXTERNAL] Re: Shib IDP v4 in Azure behind an Azure Load Balancer?

Sender is external to Loyola


> On 28 Apr 2021, at 16:03, Timothy Enders <tenders at loyola.edu> wrote:
>
> We currently run two instances of Shib IDP v4 on premises behind a Kemp Loadmaster LB.
>
> We are looking at shifting to running our IDP nodes in the Azure cloud, behind an Azure load balancer. I've gone through a lot of reading on the Azure LBs, but I'm still getting my feet under me there.
>
> Has anyone else done this? What are the gotchas?

Yes, and not really -- just make sure you have Session stickiness enabled on the Load Balancer. You can also get it to call the .../status handler as an active service check too.

If you're already Load Balancing then I doubt you'll need to worry about the backchannel-type requests hitting the same node (you probably don't support that now!).

--
Matthew Slowe (GPG: 0x6BE0CF7D04600314)
Senior Technical Consultant and Support specialist - Trust & Identity, Jisc
Team: 0300 300 2212, option 2
Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG

--
For Consortium Member technical support, see https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=04%7C01%7Ctenders%40loyola.edu%7Ca58c04c7b6724902ec0308d90a574ef7%7C30ae0a8f3cdf44fdaf34278bf639b85d%7C0%7C0%7C637552192381095784%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=53HgetCSB5wJo2WKeXfjSf0GgpnSL2zJdqy0OvxcpkU%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210429/15a9302f/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-1518788691.jpg
Type: image/jpeg
Size: 8726 bytes
Desc: Outlook-1518788691.jpg
URL: <http://shibboleth.net/pipermail/users/attachments/20210429/15a9302f/attachment.jpg>