keycloak-scim/server_installation/topics/clustering/recommended.adoc
andymunro cb730556a7
KEYCLOAK-15291 Addressing review comments. (#1201)
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2021-11-10 12:39:43 +01:00

9 lines
587 B
Text

=== Recommended network architecture
The recommended network architecture for deploying {project_name} is to set up an HTTP/HTTPS load balancer on
a public IP address that routes requests to {project_name} servers sitting on a private network. This
isolates all clustering connections and provides a nice means of protecting the servers.
NOTE: By default, there is nothing to prevent unauthorized nodes from joining the cluster and broadcasting multicast messages.
This is why cluster nodes should be in a private network, with a firewall protecting them from outside attacks.