Keycloak Clustering using JDBC_PING

[Akaram Siddiqui]

Requirement: we are using keycloak v-15 using its IAM feature and want to deploy it in two different hosts. 

1. We want to configure  cluster mode(JDBC_PING) to share sessions with each other.

2. We need to configure Https, LDAP and SSO implementation.

Question:  1. we wanted to know whether you guys support doing the above configuration?

                    2. How much would you charge for above support?

Also, Is there any helpful link to implement JDBC_PING cluster please advise.

[Bela Ban]

On 08.12.22 07:26, Akaram Siddiqui wrote:
> *Requirement:* we are using keycloak v-15 using its IAM feature and want

> to deploy it in two different hosts.

Caveat: I don't know Keycloak (just an overview of what it does); so I
suggest ask on the Keycloak mailing list

> 1. We want to configure  cluster mode(JDBC_PING) to share sessions with
> each other.
> 2. We need to configure Https, LDAP and SSO implementation.
>

> *Question:  1. *we wanted to know whether you guys support doing the
> above configuration?


I assume these are simple Infinispan/JGroups clusters. Depending on the
environment in which you're running, a number of discovery protocols can
be run:
* JDBC_PING: uses a shared DB, can be run in any env. The nodes have to
be able to talk to the DBMS and to each other
* Kubernetes/Openshift: DNS_PING / KUBE_PING / AZURE_PING, uses the
Kubernetes env to fetch information about the membership
* TUNNEL / GossipRouter: members can be behind firewalls and talk
through one or more GossipRouters

> 2. How much would you charge for above support?
>
> Also, Is there any helpful link to implement JDBC_PING cluster please
> advise.

Try the manual at jgroups.org

> --
> You received this message because you are subscribed to the Google
> Groups "jgroups-dev" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to jgroups-dev...@googlegroups.com
> <mailto:jgroups-dev...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jgroups-dev/644395ad-93e9-416e-b15f-589550aee146n%40googlegroups.com <https://groups.google.com/d/msgid/jgroups-dev/644395ad-93e9-416e-b15f-589550aee146n%40googlegroups.com?utm_medium=email&utm_source=footer>.

--
Bela Ban | http://www.jgroups.org

[Matt Gagliardi]

I'm doing an extremely similar configuration...slightly newer version of KC...currently and it's working perfectly.  There's a thread here (link) in the Keycloak forums that should help you get the config. file dialed in.