Percorrer por autor "Hossain, Shahadat"
A mostrar 1 - 1 de 1
Resultados por página
Opções de ordenação
- Design and Implementation of a Highly Available, Containerized, Federated Authentication Architecture Using Open-Source TechnologiesPublication . Hossain, Shahadat; Rodrigues, Nuno G.; Lopes, Rui PedroModern enterprises demand highly available, scalable, and observable identity systems. Managed IAM services introduce vendor lock-in and recurring costs, while self-hosted alternatives often lack validated automated failover and reproducible performance evidence. This thesis presents a containerized, open-source Keycloak High-Availability (HA) IAM architecture. It combines HA Proxy for load balancing, Patroni-managed PostgreSQL for database replication, and an observability stack (Prometheus, Grafana, Loki). Provisioned via Ansible and Docker Compose, the solution ensures reproducible deployment on commodity hardware. To guarantee cluster stability within Docker networks, JDBC_PING is used for peer discovery, mitigating split-brain anomalies. Empirical evaluation via the official Keycloak Gatling benchmark demonstrates 185.7 req/s sustained throughput with sub-100 ms latency, scaling to 722.2 req/s (0% error rate) upon edge-layer vertical expansion. Failover testing under load confirms automated leader election and VIP migration, achieving recovery under 30 seconds with zero data loss. Validated within an institutional network using HARICA-issued certificates, the architecture achieves a 61% cost reduction versus managed cloud alternatives, proving to be a practical, cloud-agnostic IAM Deployment model for mid-scale enterprises.