Symantec IGA

 View Only
  • 1.  Load Balance in Identity Management [CLUSTER / HA not working]

    Posted Feb 10, 2020 01:31 PM
    Hello,

    We have an IDM environment (With Identity Portal) here that is load-balanced, we check for ports 80 and

    20403 through the monitor, but HA is not working properly. I believe we are looking to the wrong ports in the health monitor set in the VIP in the load balance.

    When we restart IDM services or Portal services, the load balance keeps throwing connections to the unavailable appliance.

    Do you know what is the right port we should monitor through our load balance?

    Thank you!



  • 2.  RE: Load Balance in Identity Management [CLUSTER / HA not working]
    Best Answer

    Posted Feb 11, 2020 08:15 AM
    Hi Joao,

    If you are using the Identity Suite deployment, there is an Apache web proxy server (80/443) on the appliance, this sits in front of the Identity Portal, Identity Manager, and Identity Governance application services (and proxies based on the URI e.g. /sigma,  /iam). So restarting the individual application services (e.g. Identity Portal) would not necessarily make your appliance unavailable in your VIP health monitor if it was just checking say port 80.

    When using an external VIP & load-balancer you can use the direct HTTP(s) connection to the application servers on the vapp appliance, for Identity Portal this is 8081 (or 8444 if you require to use SSL between the LB and the appliance).  For Identity Manager the port is 8080 (or 8443). 

    Hope that helps,
    Rich.