Red Hat Single Sign-On Considerations for handling a large number of offline sessions when a pod is down

Solution Verified - Updated -

Issue

When a pod is down, there are no new requests satisfied (tokens) until the pod is properly started, and this takes too much time for a highly concurrent environment.

The following exceptions may be seen on the RHSSO_HOME/standalone/log/server.log file

[0m[31m03:06:59,520 ERROR [org.keycloak.services.error.KeycloakErrorHandler] (default task-19) Uncaught server error: org.infinispan.util.concurrent.TimeoutException: ISPN000476: Timed out waiting for responses for request 6299 from sso-12-c282j
    at org.infinispan@9.4.23.Final-redhat-00001//org.infinispan.interceptors.impl.AsyncInterceptorChainImpl.invoke(AsyncInterceptorChainImpl.java:259)
    at org.infinispan@9.4.23.Final-redhat-00001//org.infinispan.cache.impl.CacheImpl.executeCommandAndCommitIfNeeded(CacheImpl.java:1915)
    at org.infinispan@9.4.23.Final-redhat-00001//org.infinispan.cache.impl.CacheImpl.remove(CacheImpl.java:680)
    at org.infinispan@9.4.23.Final-redhat-00001//org.infinispan.cache.impl.DecoratedCache.remove(DecoratedCache.java:559)
    at org.infinispan@9.4.23.Final-redhat-00001//org.infinispan.cache.impl.AbstractDelegatingCache.remove(AbstractDelegatingCache.java:453)
    at org.infinispan@9.4.23.Final-redhat-00001//org.infinispan.cache.impl.EncoderCache.remove(EncoderCache.java:738)
    at org.infinispan@9.4.23.Final-redhat-00001//org.infinispan.cache.impl.AbstractDelegatingCache.remove(AbstractDelegatingCache.java:453)
...

Environment

  • Red Hat Single Sign-On (RH-SSO)
    • 7.5
    • 7.4
  • Red Hat Openshift Container Platform (OCP)
    • 4.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content