keycloak-scim/server_installation/topics/clustering/recommended.adoc

11 lines
588 B
Text
Raw Normal View History

2016-04-30 04:39:32 +00:00
2016-04-28 22:25:54 +00:00
=== Recommended Network Architecture
2017-08-28 12:50:14 +00:00
The recommended network architecture for deploying {project_name} is to set up an HTTP/HTTPS load balancer on
a public IP address that routes requests to {project_name} servers sitting on a private network. This
2016-04-28 22:25:54 +00:00
isolates all clustering connections and provides a nice means of protecting the servers.
2016-04-29 20:12:12 +00:00
NOTE: By default, there is nothing to prevent unauthorized nodes from joining the cluster and broadcasting multicast messages.
This is why cluster nodes should be in a private network, with a firewall protecting them from outside attacks.
2016-04-28 22:25:54 +00:00