PingIntelligence

ABS cluster

An API Behavioral Security (ABS ) cluster consists of stateless ABS nodes communicating with a MongoDB replica set.

Each ABS node connects to the MongoDB cluster to obtain cluster configuration information that describes peer nodes. ABS nodes themselves do not communicate with each other; they periodically send heartbeats to MongoDB with status information. Each ABS node exposes:

  • REST APIs for log streaming between ABS and API Security Enforcer (ASE)

  • REST APIs between ABS and management applications which fetch metrics, anomalies, attack types, backend error, blocked connections, flow control, and cluster status.

An ABS cluster is depicted in the following diagram.

ABS cluster as described in the text.

Configuring an ABS cluster

About this task

To configure an API Behavioral Security (ABS) cluster:

Steps

  1. Install MongoDB in a replica set

  2. Connect ABS to MongoDB

  3. To create an ABS cluster, add an ABS node and connect it to MongoDB primary node.

    Since ABS forms a stateless cluster, the information of all the nodes in the cluster is fetched by ABS nodes from MongoDB.

  4. To scale down ABS cluster, stop the ABS node that you wish to remove from the cluster.

    1. Edit the abs.properties file to remove MongoDB Internet Protocol (IP) address.