Highly available Identity and Access Management with multi-site Keycloak deployments in t...
summary
A multi-site Keycloak 24 blueprint uses an active–passive AWS design: Route 53 for DNS failover, Infinispan server with synchronous cross-site replication for session safety, and Aurora (Postgres) with the AWS JDBC wrapper so writes are synchronously mirrored and a writer failover completes in about 1 minute. Operational additions include configurable load‑shedding queue that returns 503 when full, cache‑stampede locking to avoid DB storms, non‑blocking liveness probes, and end‑to‑end tests with Gatling, Helm and OpenTelemetry; the setup is production‑ready and documented.
AI-written summary · about
chapters (12)
- 0:00Introduction to Keycloak
- 3:09Advanced feature integration
- 5:57Scaling keycloak architecture
- 10:14Implementing cross-site setups
- 14:24Session data management
- 17:49Database strategies for HA
- 21:28Architecture summary
- 23:56Optimizing performance
- 29:39DevOps and testing tools
- 36:47Future roadmap
- 38:06Resources and community
- 40:26Q&A session
related talks
12mScaling Identity for Global SASE with Keycloak
26mWeb Scale SSO
21mDon't Be Afraid to Operate Alone! The ABCs of Authentication Infrastructure Management
35mAuthentication Challenges In Multi-Region Deployments
12mWhat Is New and Coming for Managing Cloud Native Identities in…
01h 03mSingle Sign On with Keycloak: why and how
01h 10mHosting Drupal on AWS
54mHow to secure your Spring Apps with Keycloak