.png){kind=logo}
Webconf: Cluster
Precondition for setting up a cluster:
It is recommended to configure NTP (Network Time Protocol) on the initializing node.
See NTP Server Configuration for more information.
For the node to be added to the cluster, see Connect to a Cluster.
The cluster implementation of the Keyfactor Next Generation EJBCA Hardware Appliance uses Wireguard connections for all cluster communication.
This means that the cluster nodes do not need to be physically located close to each other as long as they have good network connectivity. However, this also means that a node cannot distinguish between the failure of another node and an interrupted network connection to the other node.
To avoid cluster nodes operating independently and receiving different data sets (a so-called split-brain situation), the cluster nodes coordinate and stop operating if they do not belong to the majority of connected nodes.
This ensures that only one data set can be updated at a time. In the event of a temporary network outage, the unconnected nodes can easily synchronize their data with the majority data set and continue to operate.
Basic Information and Availability Levels