[Pki-users] Dogtag behind load balancer?

Turbo Fredriksson turbo at bayour.com
Mon Mar 27 10:32:33 UTC 2017


I'm looking into setting up DogTag in my infrastructure, and I was wondering if it’s
possible to scale it (for redundancy) behind a load balancer?


I’m looking at implementing the CA and the RA. Possibly the OCSP and DRM
as well, but I’m not sure I need them - loose the private key, create a new is
the base I’m working from at the moment.

About the OCSP it say “which takes the load of CAs”, which seems roughly what
I need, although the “load” part isn’t really what I’m after. There will be very little
load, but redundancy is a huge issue…

I’m trying to understand the architecture of Dogtag, but I haven’t seen any architecture
drawings or design document as of yet.





More information about the Pki-users mailing list