Multiple Redis instances for OAuth2 in Red Hat 3scale API Management

Solution Verified - Updated -

Environment

  • Red Hat 3scale API Management
    • SaaS
    • 2.X On-premises

Issue

  • In order to support OAuth2 we also need a Redis DB. How should we use Redis - a shared Redis between all gateways (APIcast) or each gateway having its own Redis?

  • We want to put multiple instances of APIcast using OAuth2 so we were wondering if in this case is necessary to install Redis or not.

Resolution

The Redis DB is required for OAuth2. Its cache stores the pre-generated token and state values to complete the OAuth2 handshake. Once the token has been shared with the client, all keys stored are purged.

It could be deployed as a single shared instance between multiple APIcasts or multiple instances, one for each APIcast.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments