Giulio Casella via FreeIPA-users wrote:
> Maybe you can achieve your goal using DNS. Define an address (say
> api.your.domain) and configure DNS to resolve it in your 4 servers IP
> addresses. Then point your API consumer to that address.

It won't work for a number of TLS and Kerberos since names are so
important but it requires HTTP referer as well to mitigate XSS attacks.

What are the curl commands doing? Is it something you could use the IPA
python code for instead? It will retry hosts that are down and fall back
to SRV records.

rob

> 
> HTH,
> gc
> 
> 
> Il 26/06/2020 16:15, Daniel PC via FreeIPA-users ha scritto:
>> Hi, I have an IPA culster with 4 servers with DNS integrated.
>>
>> SSSD client nativetely balances the load on 4 servers and that is OK.
>>
>> But what if I need to do curl calls to API end-point. Is there some 
>> mechanism to perform discovery and load balance?
>>
>> thank you
>> _______________________________________________
>> FreeIPA-users mailing list -- [email protected]
>> To unsubscribe send an email to [email protected]
>> Fedora Code of Conduct: 
>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives: 
>> https://lists.fedorahosted.org/archives/list/[email protected]
>>
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/[email protected]
> 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to