-
1. Re: Support for failover JDBC realms in Elytron?
mchoma Jan 9, 2018 4:40 AM (in response to spacegoat)1 of 1 people found this helpfulThis is not supported directly in Elytron [1]
Which DB do you use? Could you workaround using failover with jdbc driver url? For example Oracle driver has possibility to connect to RAC by defining multiple nodes to connect. If one is unavailable another is tried.
-
2. Re: Support for failover JDBC realms in Elytron?
dlofthouse Jan 10, 2018 4:36 AM (in response to spacegoat)1 of 1 people found this helpfulIs there any difference between the two JDBC realms? Is this fail over to an exact replica on a different server?
-
3. Re: Support for failover JDBC realms in Elytron?
mchoma Feb 7, 2018 10:57 AM (in response to dlofthouse)1 of 1 people found this helpfulspacegoat Can you answer Darran's question. If we will understand your need, it can be implemented in future
-
4. Re: Support for failover JDBC realms in Elytron?
spacegoat Feb 14, 2018 5:21 PM (in response to dlofthouse)Hey, sorry about the delay in response!
There's no difference between the JDBC realms other than their names. The failover is to an exact replica on a different server, yes. In fact it's using bi-directional replication between the two databases to ensure the content is the same.
-
5. Re: Support for failover JDBC realms in Elytron?
spacegoat Feb 14, 2018 5:23 PM (in response to mchoma)The DB is PostgreSQL.
-
6. Re: Support for failover JDBC realms in Elytron?
mchoma Feb 15, 2018 2:00 AM (in response to spacegoat)1 of 1 people found this helpfulI believe this specific situation should be solved on DB level [1] not on security framework level.
Probably some support on /subsystem=datasources would be also reasonable, but I can't say for sure.
How do you solve this for rest of applicaiton (aside of authentication)?
[1] https://www.postgresql.org/docs/9.2/static/high-availability.html
-
7. Re: Support for failover JDBC realms in Elytron?
spacegoat Feb 15, 2018 9:28 AM (in response to mchoma)That's a great question, the answer at this point is, "my solution is still in progress". See my latest question posed as it's entirely related to what you asked: Client config for HA EJB RMI
From my theoretical current perspective though, my plan was to hold configurations to each host controller within the client application. On specific exceptions related to connection failure, try another destination (failover) with the failed invocation. The clustering and DB bi-directional replication would provide the underlying support for displaced invocations (i.e. host controller X is unresponsive, so host controller Y was used (data and state is the same thanks to DB replication and Infinispan)).
This problem with the authentication piece, however, means that if the primary realm is down, I have to change the Wildfly profile (a manual action assuming I didn't deploy some hacky script to cron) to prefer the secondary realm to get authentication back up. This isn't the end of the world or anything, but it was a capability of the WildFly 10 security system.
The DB driver approach is an interesting perspective, I hadn't considered that as a workaround. I'll look into that, thanks!