Load Balancing; Cloning Preparation - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

Chapter 20. Configuring the Certificate System for High Availability
Figure 20.1. Certificate System Example
As this diagram indicates, only one of the CAs can generate the CRLs. See
Master Conversion"
for more information about configuring a clone for CRL generation during cloning.

20.1.2. Load Balancing

The load balancer in front of a Certificate System system is what provides the actual failover support
in a high availability system. A load balancer can also provide the following advantages as part of a
Certificate System system:
• DNS round-robin, a feature for managing network congestion that distributes load across several
different servers.
• Sticky SSL, which makes it possible for a user returning to the system to be routed the same host
used previously.
Consult the documentation for the load balancer for more information about the features, advantages,
and configuration of a load balancer.

20.2. Cloning Preparation

Cloning a subsystem creates two server processes performing the same functions: another, new
instance of the subsystem is created and configured to use the same keys and certificates to perform
452
Section 20.4, "Clone-