<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">For what it’s worth, you can find the project at [<a href="https://github.com/UniconLabs/shibboleth-hazelcast-storage-service">https://github.com/UniconLabs/shibboleth-hazelcast-storage-service</a>].</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">A few notes:</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">1. I typically will not update a dependency version unless there’s a compelling reason (security or direct bugs), so generally updates should not be a problem. Other than that, there’s an opportunity to write the maps to disk for durability, though it’s not written yet.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">2. Using server side storage is still useful for some scenarios (realtime auditing, session revocation, etc), but more than that, there are classes of browsers that don’t work with client side storage (no html5 storage and cookie size limits, think embedded). Probably not something most will deal with, though.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">3. There are a few opportunities for enhancement, particularly in indexing in some use cases of the storage API.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">4. This code is free for anyone to use, and should be compatible with the Shib license, if the developers want to use it. I could be available for a code review if needed, as well.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Sorry for the rambling, and let me know if you have any other questions. Thanks</div> <br> <div id="bloop_sign_1471371708183037952" class="bloop_sign"><div style="font-family:helvetica,arial;font-size:13px">-Jj</div></div> <br><p class="airmail_on">On August 15, 2016 at 15:49:24, Paul B. Henson (<a href="mailto:henson@cpp.edu">henson@cpp.edu</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div><div></div><div>> From: Cantor, Scott
<br>> Sent: Wednesday, August 10, 2016 7:34 PM
<br>>
<br>> I don't know anything about Hazelcast, but if it works that well,
<br>> probably the best option would be if JJ were willing to put it into a
<br>> donateable form and be willing to act as a backstop supporting it if we
<br>> included it in 3.3.
<br>>
<br>> I'm willing to spend a little time reviewing what it's doing to see if
<br>> it's taking any shortcuts I would be uncomfortable with.
<br>
<br>I can't speak for Unicon or JJ, but personally I think that's a great idea :). I used their hazelcast ticket registry with CAS for a number of years and it worked very well, so far their hazelcast storage backend for the idp has been working just as well.
<br>
<br>It's pure Java, which is nice in that you don't need to set up and deploy any extra pieces or components. It also seems to be very reliable and fault-tolerant, which is a good feature for a clustering backend. The only piece missing is that the free version doesn't support over the wire encryption between the cluster members; I work around that by using transport level encryption via IPsec tunnels. I think most of the people doing clustering aren't using encryption anyway and are just trusting their data center networks to be secure.
<br>
<br>It would be really useful for the IDP to support easy to set up shared state clustering out of the box, particularly for people that want to use the CAS protocol support.
<br>
<br>--
<br>Paul B. Henson | (909) 979-6361 | http://www.cpp.edu/~henson/
<br>Operating Systems and Network Analyst | henson@cpp.edu
<br>California State Polytechnic University | Pomona CA 91768
<br>
<br>
<br>
<br>--
<br>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net
<br></div></div></span></blockquote></body></html>