Pimping the ForgeRock Identity Platform for a Billion Users
0 likes236 views
This document discusses strategies for scaling the ForgeRock identity platform to support 1 billion users. It describes how ForgeRock Directory Services provides a specialized, centralized, secure, highly available, and high-throughput identity store. It has been benchmarked to support 500 million users and tested to support 3 billion users over 1 week. The document also discusses how ForgeRock products are evolving to support cloud-native architectures with horizontal scalability, simplified replication, and data sharding to further increase capabilities.
Pimping the ForgeRock Identity Platform for a Billion Users
- 1. © 2017 ForgeRock. All rights reserved. Pimp the ForgeRock Platform to 1B Users Ludovic Poitou – Director Product Management
- 2. © 2017 ForgeRock. All rights reserved. 1 Billion Users • User Profiles • User Sessions • User Devices • # of Concurrent Access • # of Transactions • Getting started with 1B Identities
- 3. © 2017 ForgeRock. All rights reserved.
- 4. © 2017 ForgeRock. All rights reserved. ForgeRock Directory Services • Specialized database • Based on LDAP protocol and Data Model • Centralized, Secure, Highly Available, High Throughput, Low Latency • Used by all products: Identity Store, Configuration Store, Session Store, Managed Object Store (next version) • Very good vertical scalability • Benchmark with 500M Users • QA tests for Sanity with 3B Users. 1 week.
- 5. © 2017 ForgeRock. All rights reserved. The Evolution of Databases • Characteristics of the NoSQL databases • Distributed on Commodity Hardware • Elastic Scaling • Key Value Pairs & Unstructured data • Really designed for ever growing data and real time analysis (Time Series) • Ease of Use through Automation and Orchestration • BUT: • No ACID • Limited Indexing • No Standard
- 6. © 2017 ForgeRock. All rights reserved. Some Principles of NoSQL
- 7. © 2017 ForgeRock. All rights reserved. Directory Proxy Server Distributed Identity Architecture The proxy provides … • A single point of access with choice of using REST or LDAP to access underlying LDAP database services. • High service availability, hiding implementation details from LDAP client applications. • LDAP load balancing and failover strategies to handle referrals, connection failures, and network partitions. • Can be deployed with any LDAPv3 identity store. LDAP or REST Tenant 1 Proxy Service Tenant 2 Tenant 3 Tenant 4 LDAP
- 8. © 2017 ForgeRock. All rights reserved. DIRECTORY SERVICE What’s Next? • Cloud Native • Registration, Discovery and Automation • Horizontal Scalability • Simplification, Optimization of Replication • Data Sharding Data Store Data Store Data Store Data Store Data Store Data Store Data Access Data Store Data Store Data Access Data Access Client AppClient App Client App
- 9. © 2017 ForgeRock. All rights reserved. Access Management • Autonomous Servers • Cloud Native • Session Store Scalability and Performances • => Horizontal and Elastic Scalability
- 10. © 2017 ForgeRock. All rights reserved. Identity Management • Cloud Native • Leveraging Directory Services as the Internal Repository
- 11. © 2017 ForgeRock. All rights reserved. Identity Gateway • Immutable Configuration • Cloud Native • Performances
- 12. © 2017 ForgeRock. All rights reserved. Thank You