I'm looking into setting up DogTag in my infrastructure, and I was wondering if it’s possible to scale it (for redundancy) behind a load balancer? I’m looking at implementing the CA and the RA. Possibly the OCSP and DRM as well, but I’m not sure I need them - loose the private key, create a new is the base I’m working from at the moment. About the OCSP it say “which takes the load of CAs”, which seems roughly what I need, although the “load” part isn’t really what I’m after. There will be very little load, but redundancy is a huge issue… I’m trying to understand the architecture of Dogtag, but I haven’t seen any architecture drawings or design document as of yet.

_______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users