COmanage Users List

[Scott Koranda <>]

Hi Barbara,

I operate the COmanage Registry service for CILogon at

https://registry.cilogon.org

The service is deployed using AWS and Docker Swarm in a HA
configuration.

Traffic comes in from the internet to a Network Load Balancer "flavor"
of the AWS Elastic Load Balancing (ELB) service. The targets for the ELB
are the Docker Swarm manager nodes which are EC2 instances running
Docker in a Swarm configuration.

Each Docker Swarm manager node runs the reverse proxy/load balancer
Traefik:

https://traefik.io/

Web traffic is consumed by Traefik and then routed to COmanage Registry
containers. The COmanage Registry containers use mod_auth_openidc and
consume OIDC tokens/claims from the CILogon OP for authentication.
Traefik is configured to use sticky sessions so that requests always
route to the same COmanage Registry container.

We leverage the AWS MariaDB "flavor" of Aurora RDS for database HA:

https://aws.amazon.com/rds/aurora/

Each Docker Swarm manager node also runs an OpenLDAP slapd daemon in
proxy mode (ldap backend). It proxies LDAP traffic in much the same way
Traefik proxies web traffic, routing traffic as necessary to slapd
containers. 

HTH,

Scott K

> I'm going to set up Comanage and want to find some more documents of
> existing deployments which include HA capabilities
> 
> The only document I found is the official page:
> 
> https://spaces.at.internet2.edu/display/COmanage/Registry+Installation+-+High+Availability+Considerations
> 
> Thanks for any other hints you could share.
> 
> Thank you
> Regards
> 
> Barbara