IBM Security Verify

 View Only
  • 1.  Standard junction failover options

    Posted Wed April 27, 2022 07:39 AM
    I've been trying to find options to achieve failing over an unavailable junction (one server) to another junction in another webseal server in the cluster. What are the options available?

    ------------------------------
    anu sule
    ------------------------------


  • 2.  RE: Standard junction failover options

    Posted Wed April 27, 2022 10:04 AM
    Hi Anu,

    High availability for junctions is achieved by defining multiple target servers for a single junction.  WebSEAL can then provide load-balancing and/or failover between those servers.

    If an entire WebSEAL server fails, then sessions can failover to another WebSEAL.  That 2nd WebSEAL would have the same junctions and backend servers defined.
    Using "stateful junction" configuration, the 2nd WebSEAL can direct requests to the original backend server if it is still available or to a different one if it is not.

    The two WebSEAL servers would be behind a load-balancer.  Session failover between the WebSEALs can be achieved using:
     - Failover cookies
     - Distributed Session Cache
     - Redis

    Jon.

    ------------------------------
    Jon Harry
    Senior Technical Sales Enablement Specialist
    Identity and Access Management
    IBM Technology, Worldwide
    ------------------------------