Understanding and tuning RH-SSO distributed caches ?

Solution Verified - Updated -

Issue

Within RH-SSO 7.6 standalone-ha.xml, the distributed caches are configured as follows:

 <distributed-cache name="sessions" owners="1">
                    <expiration lifespan="900000000000000000"/>
                </distributed-cache>
                <distributed-cache name="authenticationSessions" owners="1">
                    <expiration lifespan="900000000000000000"/>
                </distributed-cache>
                <distributed-cache name="offlineSessions" owners="1">
                    <expiration lifespan="900000000000000000"/>
                </distributed-cache>
                <distributed-cache name="clientSessions" owners="1">
                    <expiration lifespan="900000000000000000"/>
                </distributed-cache>
                <distributed-cache name="offlineClientSessions" owners="1">
                    <expiration lifespan="900000000000000000"/>
                </distributed-cache>
                <distributed-cache name="loginFailures" owners="1">
                    <expiration lifespan="900000000000000000"/>
                </distributed-cache>
                <distributed-cache name="actionTokens" owners="2">
                    <heap-memory size="-1"/>
                    <expiration interval="300000" lifespan="900000000000000000" max-idle="-1"/>
                </distributed-cache>

As a result the caches with owners="1" will cause loss of data, i.e. clientSession, in case of a RH-SSO cluster of 2 or more nodes and a shutdown or failure of one node.
How is it possible to harden RH-SSO high availability ?

Environment

  • Red Hat Single Sign on
    • 7
  • Infinispan
  • Distributed caches

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content