Safeguard Community

Forum specific question about cluster SPP and his service exposed

specific question about cluster SPP and his service exposed

dario guastella over 1 year ago

1. How should a service be exposed to high reliability (I imagine that a clustered service has associated fqdn and ip)?

2. Does an automatic service failover mechanism exist or has it been implemented? In case not can we request an enhancement request?

0 Tawfiq.Ahmad over 1 year ago

Hi Dario,

If you are asking about user's login to SPP using a single VIP then this can be done using DNS (Create a FQDN for Safeguard and Virtual IP) and a load balancer to direct traffic between SPP cluster nodes.

Load balancer would monitor SPP via API endpoint to check if node is online and route based on availability:

https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/266594/is-it-possible-to-monitor-the-health-state-of-a-safeguard-appliance-using-a-web-page

In addition to this, SPP does have HA with Automatic offline workflow, please refer to the admin guide here:

https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/263580/questions-about-offline-workflow-mode-feature-in-spp

For more details on SPP Clustering:

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/6.13.1/administration-guide/97#TOPIC-1778069

Thanks!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel