Clustering

To cluster the Onegini Security Proxy, you need to run multiple instances of the security-proxy Docker container. Redis contains all state that is used by the Security Proxy. The Security Proxy container itself is stateless.

Deploying multiple instances of the Security Proxy simply means duplicating the Compose service that describes the security-proxy container.

The Docker compose excerpt below gives a very basic idea of deploying two instances of the security-proxy container. For a full example of a security-proxy Compose configuration see the Installation instructions.

  proxy1:
    image: release.onewelcome.com/onegini/security-proxy:<SECURITY_PROXY_VERSION>
    restart: always
    user: onegini
    environment:
      ...

  proxy2:
    image: release.onewelcome.com/onegini/security-proxy:<SECURITY_PROXY_VERSION>
    restart: always
    user: onegini
    environment:
      ...