Adaptive clustering
Adaptive clustering automatically distributes session-state information to multiple nodes. Administrators do not have to modify individual configuration files to specify which nodes should participate in tracking user sessions.
In essence, each session receives an address from within an internally-defined range. For redundancy, multiple nodes store each session. These nodes form a replica set. Any node that receives a request and must look up or store session-state information can do so by calculating the address of the session and reaching out to the corresponding replica set.
As individual nodes join and leave the cluster, adaptive clustering redistributes session-state information to maintain the replica set throughout the cluster.
The default size of a replica set is three, which provides redundancy in case two nodes fail and ensures that a single node’s slow response time doesn’t delay requests. The replication.factor setting is in the <pf_install>/pingfederate/server/default/conf/cluster-adaptive.conf file.
Enable adaptive clustering by setting the pf.cluster.adaptive property in the run.properties file to true. This is the default state in new installations. For upgrades, if such property is not found or is set to false, the system disables adaptive clustering and enables directed clustering instead. To enable or disable adaptive clustering, set the pf.cluster.adaptive property to true or false on each node and then restart PingFederate. The run.properties file is in the <pf_install>/pingfederate/bin directory.
|
After making changes to the |
|
Adaptive clustering does not support the SAML 2.0 single logout (SLO) profile using the SOAP binding. If you have configured one or more SAML 2.0 connections to support SLO using SOAP, you must either share all nodes or designate state servers deployment strategies in directed clustering. For more information, see Directed clustering. |
Other advanced settings
Fine-tune each runtime state-management service implementation separately by modifying a configuration file located in the <pf_install>/pingfederate/server/default/conf directory. After making changes in these files, you must apply the changes to all nodes in the cluster manually.
|
The adaptive clustering concept is not applicable to the Artifact-Message Persistence and Retrieval Service, which always shares messages across all nodes to fulfill its objectives. As needed, you can modify other applicable properties, such as the |
The following tables indicate the configuration file that applies to each implementation and the applicable properties. See the indicated sections for detailed information about each implementation.
| Configuration file | RPC-based service implementation |
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Property | Description | ||
|---|---|---|---|
|
How long, in milliseconds, this node waits before timing out unresponsive RPC invocations. The default value is |
||
|
Indicates how many responses to wait for when making synchronous remote procedure calls. When set to
|
||
(found only in the |
A node downloads a full revocation list from another node during startup or when it rejoins a cluster after being disconnected from it, for example due to a temporary network issue. This setting determines the amount of time in milliseconds PingFederate waits before aborting the download and reporting a timeout error. The default value is |
||
(found only in the |
Determines how PingFederate should process queries for revocation status. When set to
|
|
When you have enabled adaptive clustering, PingFederate ignores other properties found in these configuration files—namely |