[22640] in Kerberos
Re: Kerberos behind load balancer?
daemon@ATHENA.MIT.EDU (Sam Hartman)
Wed Oct 6 13:55:49 2004
To: Jason T Hardy <jthardy@uta.edu>
From: Sam Hartman <hartmans@mit.edu>
Date: Wed, 06 Oct 2004 13:52:50 -0400
In-Reply-To: <1097032527.3184.15.camel@dionysus.uta.edu> (Jason T. Hardy's
message of "Tue, 05 Oct 2004 22:15:49 -0500")
Message-ID: <tsld5zvrax9.fsf@cz.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
>>>>> "Jason" == Jason T Hardy <jthardy@uta.edu> writes:
Jason> Sam, Actually, a load balancer simplifies client deployment
Jason> in our case (we can't utilize DNS load balancing on our
Jason> campus). We can, with a load balancer, have all of the
Jason> KDC's share one hostname. Our kadmin server can also share
Jason> that hostname.
I think what I'm questioning here is the need for load balancing of
the KDC. I agree that if you need to load balance a KDC, using a load
balancer is one way to do it. If you don't actually need to load
balance access to your KDCs, you'll find you get a much simpler
deployment without the load balancer.
--Sam
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
