|Applies To||RSA Product Set: RSA ECAT 4.X|
RSA Product/Service Type: RSA ECAT Console Server
RSA Version/Condition: 4.0.x, 4.1.x
|Issue||When to deploy a Secondary ECAT Console Server. What are the limits and performance?|
|Resolution||The ECAT 184.108.40.206 User Guide on the RSA SCOL website includes details on configuring a Secondary ECAT Server, and some of the limitations.|
Some of the requirements include:
• All servers must use the same certificates.
• All servers must be able to access a network shared storage location for the ECAT file download repository.
• All agents must contact the primary server the first time they connect (They will download a list of all the servers at that point).
• All secondary servers must be able to communicate to the primary server.
• SQL Server TCP/IP encryption must be enabled on all SQL Server instances.
The ECAT User Guide also mentions, "Secondary servers cannot be used for the sole purpose of segmenting the ECAT network, as all agents will need the capability to report to the Primary server."
The Secondary ECAT server is more suited to large environment (10,000+), below this it is better to give more power to the Primary server, though small environments will work with a Secondary.
It is estimated that approximately 1/3 of the work made by the secondary servers will be duplicated on the primary server (modules, table aggregation, etc). This was observed empirically.
So if all agents are split 50/50 between Primary, and a Secondary, the Primary has 66.6% of the initial load (50 + 16.6) = (50 + 50/3). In the case of small environments, the final ratio might be even bigger, something like 75% of the load on the Primary.
Even with no Agents on the Secondary Server there will be a minor impact to the Primary to maintain updates to the Secondary.
Server Discovery Mode:
Nearest Server is based on the best ping response from all ECAT Servers.
Fair Distribution tries to spread the Agents between all ECAT Servers.
ECAT Agents cannot be redirected to a new server once they’ve been assigned to a Primary, or a Secondary.