|
| 1 | +:title: High availability in Keycloak 24 |
| 2 | +:date: 2024-05-07 |
| 3 | +:publish: true |
| 4 | +:author: Alexander Schwartz, Ryan Emerson |
| 5 | + |
| 6 | +A single sign on solution for your customers and employees shouldn't be a single-point-of-failure in your architecture. |
| 7 | +At Devoxx France 2024, Ryan Emerson and Alexander Schwartz presented, from an architects and developer perspective, how Keycloak approached the problem. |
| 8 | +They describe which architecture the Keycloak team chose, the challenges they faced and which tools helped along the way. |
| 9 | +The slides and the recorded video are linked below. |
| 10 | +Scroll down for additional links and details of the tasks we're currently working on to further enhance the architecture. |
| 11 | + |
| 12 | +-- |
| 13 | +++++ |
| 14 | +<div class="paragraph"> |
| 15 | +<iframe src="https://www.youtube.com/embed/y1yE7Rd3lGE?si=rllY8vPtmAw1CvaP&start=8" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen style="width: 100%; max-width: 600px; height: auto; aspect-ratio: 560 / 315;" ></iframe> |
| 16 | +</div> |
| 17 | +++++ |
| 18 | +-- |
| 19 | + |
| 20 | +-- |
| 21 | +++++ |
| 22 | +<div class="paragraph"> |
| 23 | +<iframe class="speakerdeck-iframe" frameborder="0" src="https://speakerdeck.com/player/9514fa8879e24fea9b706e7331fed95d" title="Highly available Identity and Access Management with multi-site Keycloak deployments in the cloud" allowfullscreen="true" style="border: 0px; background: padding-box padding-box rgba(0, 0, 0, 0.1); margin: 0px; padding: 0px; border-radius: 6px; box-shadow: rgba(0, 0, 0, 0.2) 0px 5px 40px; width: 100%; max-width: 600px; height: auto; aspect-ratio: 560 / 315;" data-ratio="1.7777777777777777"></iframe> |
| 24 | +</div> |
| 25 | +++++ |
| 26 | +-- |
| 27 | + |
| 28 | +-- |
| 29 | +++++ |
| 30 | +<div class="paragraph"> |
| 31 | +<a href="${blogImages}/devoxx_france_2024.jpg"><img src="${blogImages}/devoxx_france_2024.jpg" alt="Two speakers on a stage at Devoxx France with slides from Keycloak" style="width: 100%; max-width: 600px; height: auto; aspect-ratio: 560 / 315;"></a> |
| 32 | +</div> |
| 33 | +++++ |
| 34 | +-- |
| 35 | + |
| 36 | +A clustered Keycloak deployment in a single site or datacenter provides sufficient availability for many. |
| 37 | +However, an increasing number of organizations need to utilize multiple sites for improved resiliency or to meet legal requirements. |
| 38 | +In 2023, Keycloak overhauled its multi-site capabilities for public and private cloud infrastructures, tested them thoroughly and provided deployment blueprints to the community. |
| 39 | +As part of the release of Keycloak 24, an active/passive setup is now fully supported. |
| 40 | + |
| 41 | +Read more about it in the new https://www.keycloak.org/high-availability/introduction[high availability guide] published as part of https://www.keycloak.org/documentation[Keycloak’s documentation], and get more tools and background information in the https://github.com/keycloak/keycloak-benchmark[Keycloak Benchmark Project]. |
| 42 | +Since the https://www.keycloak.org/2023/12/recover-site-failures.html[previous blog post] which covered Keycloak 23, we have made the configuration of such a setup simpler, with fewer options required by Keycloak and the Keycloak Operator. |
| 43 | +Thank you to everyone who provided feedback along the way, and those who participated in our survey in early 2023 which guided us in the implementation of this setup. |
| 44 | + |
| 45 | +Still, the journey doesn't stop here: The team is now working on https://github.com/keycloak/keycloak/discussions/28271[durable sessions across restarts and upgrades], and a |
| 46 | +https://github.com/keycloak/keycloak/issues/28745[simpler Infinispan architecture which aims to eventually support active/active]. |
| 47 | +Follow these issues and discussions to stay up-to-date with the latest developments, and provide feedback on Keycloak’s nightly builds. |
0 commit comments