High availability¶
The high availability of a cyberelements Cleanroom infrastructure concerns the following components:
- Internal components of the solution: Mediation Controller, Edge Gateway,
- Servers hosting the database(s),
- Hypervisors,
- Directory,
- Etc.
Access to target resources:¶
By default, video recordings and metadata are stored on the Edge Gateway(s).
To ensure continuity of service for access to target resources, at least two Gateways are required. When a user connects to an application/resource/virtual administration workstation, one of the Gateways is selected to manage access and therefore recording. If this Gateway is not available, the other Gateway present in the organization will be selected.
Directory:¶
If user authentication relies on a third-party LDAP or AD directory, it is necessary to ensure its high availability.
High availability can only be ensured if the administrator declares several domain controllers in the cyberelements Cleanroom configuration. If the first domain controller does not respond, a switchover to the next one will occur.
It is also recommended to use a site containing several cyberelements Cleanroom Edge Gateways.
Mediation Controller: (specific to cyberelements Cleanroom)¶
Mediation Controller servers have an internal high-availability mechanism. Declaring a floating IP address (VIP) allows for regular data synchronization between the “Master” Mediation Controller database and the “Slave” Mediation Controller database. This data synchronization can be forced manually from the “System” console.
Two high-availability modes are available:
- The “Load Balancer” mode, which distributes the load between the different Mediation Controllers,
- The “Failover” mode, which ensures service continuity in the event of a failure of the “Master” Mediation Controller.
This configuration is chosen when the infrastructure is installed.
Database: (specific to cyberelements Cleanroom)¶
All cyberelements Cleanroom organization configurations are stored in a PostgreSQL or MSSQL database that must be hosted on a PostgreSQL or MSSQL cluster. This cluster allows to ensure the high availability of the database accesses.