Skip to content

Commit c726057

Browse files
ryanemersonahus1
andauthored
Devoxx France 2024 (#464)
Signed-off-by: Ryan Emerson <[email protected]> Signed-off-by: Alexander Schwartz <[email protected]> Co-authored-by: Alexander Schwartz <[email protected]>
1 parent 6712b35 commit c726057

File tree

2 files changed

+47
-0
lines changed

2 files changed

+47
-0
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
:title: High availability in Keycloak 24
2+
:date: 2024-05-07
3+
:publish: true
4+
:author: Alexander Schwartz, Ryan Emerson
5+
6+
A single sign on solution for your customers and employees shouldn't be a single-point-of-failure in your architecture.
7+
At Devoxx France 2024, Ryan Emerson and Alexander Schwartz presented, from an architects and developer perspective, how Keycloak approached the problem.
8+
They describe which architecture the Keycloak team chose, the challenges they faced and which tools helped along the way.
9+
The slides and the recorded video are linked below.
10+
Scroll down for additional links and details of the tasks we're currently working on to further enhance the architecture.
11+
12+
--
13+
++++
14+
<div class="paragraph">
15+
<iframe src="https://www.youtube.com/embed/y1yE7Rd3lGE?si=rllY8vPtmAw1CvaP&amp;start=8" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen style="width: 100%; max-width: 600px; height: auto; aspect-ratio: 560 / 315;" ></iframe>
16+
</div>
17+
++++
18+
--
19+
20+
--
21+
++++
22+
<div class="paragraph">
23+
<iframe class="speakerdeck-iframe" frameborder="0" src="https://speakerdeck.com/player/9514fa8879e24fea9b706e7331fed95d" title="Highly available Identity and Access Management with multi-site Keycloak deployments in the cloud" allowfullscreen="true" style="border: 0px; background: padding-box padding-box rgba(0, 0, 0, 0.1); margin: 0px; padding: 0px; border-radius: 6px; box-shadow: rgba(0, 0, 0, 0.2) 0px 5px 40px; width: 100%; max-width: 600px; height: auto; aspect-ratio: 560 / 315;" data-ratio="1.7777777777777777"></iframe>
24+
</div>
25+
++++
26+
--
27+
28+
--
29+
++++
30+
<div class="paragraph">
31+
<a href="${blogImages}/devoxx_france_2024.jpg"><img src="${blogImages}/devoxx_france_2024.jpg" alt="Two speakers on a stage at Devoxx France with slides from Keycloak" style="width: 100%; max-width: 600px; height: auto; aspect-ratio: 560 / 315;"></a>
32+
</div>
33+
++++
34+
--
35+
36+
A clustered Keycloak deployment in a single site or datacenter provides sufficient availability for many.
37+
However, an increasing number of organizations need to utilize multiple sites for improved resiliency or to meet legal requirements.
38+
In 2023, Keycloak overhauled its multi-site capabilities for public and private cloud infrastructures, tested them thoroughly and provided deployment blueprints to the community.
39+
As part of the release of Keycloak 24, an active/passive setup is now fully supported.
40+
41+
Read more about it in the new https://www.keycloak.org/high-availability/introduction[high availability guide] published as part of https://www.keycloak.org/documentation[Keycloak’s documentation], and get more tools and background information in the https://github.com/keycloak/keycloak-benchmark[Keycloak Benchmark Project].
42+
Since the https://www.keycloak.org/2023/12/recover-site-failures.html[previous blog post] which covered Keycloak 23, we have made the configuration of such a setup simpler, with fewer options required by Keycloak and the Keycloak Operator.
43+
Thank you to everyone who provided feedback along the way, and those who participated in our survey in early 2023 which guided us in the implementation of this setup.
44+
45+
Still, the journey doesn't stop here: The team is now working on https://github.com/keycloak/keycloak/discussions/28271[durable sessions across restarts and upgrades], and a
46+
https://github.com/keycloak/keycloak/issues/28745[simpler Infinispan architecture which aims to eventually support active/active].
47+
Follow these issues and discussions to stay up-to-date with the latest developments, and provide feedback on Keycloak’s nightly builds.

blog/images/devoxx_france_2024.jpg

104 KB
Loading

0 commit comments

Comments
 (0)