Hyper-Scalable Privileged Access Service: High Availability Disaster Recovery

If you are a current customer with support hours for Delinea Professional Services, you can discuss any of these diagrams in detail with one of our Professional Services support architects.

Definitions

  • Recommended for large production environments
  • Major Application components split primarily across many servers with each major layer offering HA capability
  • Connectors installed in one or more locations
  • Flows depict connectivity for web based connection between user and destination systems and using native SSH or RDP clients to connect through connector to destination systems (proxied use cases)
  • Servers in Disaster Recovery Location can be built but should be considered "cold" standby servers for disaster recovery event. Layers highlighted in grey should be brought online manually. Load Balancer configuration should only be marked as active once all components have been brought online, then traffic can be redirected to DR location.
  • There are constraints between HSPAS and Redis as it relates to multi-site designs. A manual failover may require a partial rebuild by modifying the installation and redeployment of nodes. Servers can be prepared and "ready" but this may impact your RTO and RPO for failover.

System Requirements

  • 8 Core, 8 GB RAM for the Application, Web, Logging, and Relay layers
  • 4 Core, 16 GB RAM for the Connector
  • 8 Core, 32 GB RAM for Postgres
  • 8 Core, 32 GB RAM for Redis Cache
  • Management Server does not need to be a net-new system and can have minimal specs

Diagram

Figure: Hyper-scalable Privileged Access Service: High availability disaster recovery

alt

Figure: Diagram legend

alt