000030226 - ECAT Secondary Server deployment and performance details

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000030226
Applies ToRSA Product Set: RSA ECAT 4.X

RSA Product/Service Type: RSA ECAT Console Server

RSA Version/Condition: 4.0.x, 4.1.x

Platform: Windows
IssueWhen to deploy a Secondary ECAT Console Server.  What are the limits and performance?
ResolutionThe ECAT User Guide on the RSA SCOL website includes details on configuring a Secondary ECAT Server, and some of the limitations.
Some of the requirements include:
• All servers must use the same certificates.
• All servers must be able to access a network shared storage location for the ECAT file download repository.
• All agents must contact the primary server the first time they connect (They will download a list of all the servers at that point).
• All secondary servers must be able to communicate to the primary server.
• SQL Server TCP/IP encryption must be enabled on all SQL Server instances.
The ECAT User Guide also mentions, "Secondary servers cannot be used for the sole purpose of segmenting the ECAT network, as all agents will need the capability to report to the Primary server."
The Secondary ECAT server is more suited to large environment (10,000+), below this it is better to give more power to the Primary server, though small environments will work with a Secondary.
It is estimated that approximately 1/3 of the work made by the secondary servers will be duplicated on the primary server (modules, table aggregation, etc). This was observed empirically.
So if all agents are split 50/50 between Primary, and a Secondary, the Primary has 66.6% of the initial load (50 + 16.6) = (50 + 50/3). In the case of small environments, the final ratio might be even bigger, something like 75% of the load on the Primary.
Even with no Agents on the Secondary Server there will be a minor impact to the Primary to maintain updates to the Secondary.
Server Discovery Mode:
Nearest Server is based on the best ping response from all ECAT Servers.
Fair Distribution tries to spread the Agents between all ECAT Servers.
ECAT Agents cannot be redirected to a new server once they’ve been assigned to a Primary, or a Secondary.