I am using WSO2 Balana XACML 3.0. I want to distribute my PEP and PDP as a service so that I can host multiple instances of PEP and PDP on the virtual machine. What is the best way to achieve this and how can I handle multiple PEP and PDP?
how to distribute PEP and PDP in XACML as a service call
631 views Asked by Utsav At
1
There are 1 answers
Related Questions in WSO2
- How to make gRPC request in WSO2 micro-integrator via Postman?
- Following PATTERN 3 Deployment ,Not able to consume apis in Gateway
- WSO2 change localhost - ERR_CERT_AUTHORITY_INVALID
- How to resolve unauthenticated error after calling REST API endpoint to update the Challenge Questions in WSO2 v5.11.0?
- Enable logging for API calls in wso2 identity server
- How to set weight of enpoints durin laod balancing in wso2 manager
- old apikey dont works for newly subscribed apis in wso2 apim
- WSO2 API-M: What is Synapse and why it spits following error: I/O error: Connection reset java.net.SocketException: Connection reset?
- how to upgrade httpcore-nio plugin of wso2 api manager
- Amazon RDS PostgreSQL - Caused by: java.net.UnknownHostException: yyyy.xxx.us-west-1.rds.amazonaws.com in WSO2 EI docker container
- How to Extract Queue Name, Priority, and Message ID from RabbitMQ Inbound Endpoint Messages in WSO2 MI 4.2?
- how do i manage role and permission in server side for my predefined roles and assign permission in wso2 identity server?
- Installation process of wso2 Enterprise integrator
- WSO2 - SSL troubleshooting: ERR_CERT_AUTHORITY_INVALID
- How to do error handling in Clone-Aggregator mediator in WSO2 Micro Integrator?
Related Questions in XACML
- XACML policy that needs to evaluate based on different PiPs
- XACML trying to pull any of a list of values from azure roles
- How to configure a Policy engine and calculate attributes based on risk score Algorithm?
- How to express pagination in attribute based access control?
- Representing complex data types in XACML using Authzforce
- Obtain all Obligations from all the policies
- I am writing a ALFA policy for a case where I need to assign a value as empty string in my code. How to define empty string array
- Authzforce - XACML AttributeSelector
- XACML Obligations in sun's XACML implementation
- Using conversion-functions in XACML
- How does missing-attribute work in XACML?
- How i can send certificate for EAP-authentication to authzforce?Or how i can configured authzforce for it?
- How can I use subject-conflicts in a Authzforce request?
- How to convert CSV or XML to XACML based on Role Based Access Controll(RBAC)?
- How to convert CSV or XML to XACML?
Related Questions in XACML3
- Representing complex data types in XACML using Authzforce
- Check Request Headers using XACML in Fiware platform
- Is there a way to define variables externally from XACML policy and refer them from inside the policy rules
- WSO2 IS Request XACML with Acces Token - Error 403 Forbidden
- How can I write a "If..then" condition in Axiomatics
- XACML: how to find a long in a list of longs (list contains)
- Understanding how XACML 3.0 attribute values are evaluated against a rule
- Context changes in XACML
- WSo2IS tutorial kmarketAtrrFinder project code and build
- Compare two multi-element attributes in XACML policy
- Comparing specific custom-defined attribute of user
- XACML combining PIPs in policy
- Why XACML Response Returns NotApplicable on Azure Web App?
- Unable to reach local host via terminal window
- Storing XACML file in JSON using MongoDB for Authzforce
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
I guess, you want to separate out the PDP functions as web service API. Then multiple PEP can call one PDP (or cluster of PDP)? Balana is an java library that implement XACML specification. If you need to expose its functions as an web service API, you want to deploy this library in a service hosting server as as Axis2. You can use Axis2 clustering to communicate with multiple servers (cluster). Further more, WSO2 Identity Server is also using Balana library, and It has exposed PDP function as web service API. If you are thinking about the performance, HA, clustering and so on, It is better to use WSO2 Identity Server rather than the Balana library. Because it contains all feature that is needed for production step. (WSO2 Identity Server also an opensource server that you can use freely). However, It is not required to use WSO2IS. You can use Balana. As i mentioned you may need to do some modifications to use it as a web service API and to use it in a production. To get more understand, I could point to the source code to see how Balana library has been used by WSO2 Identity Server. Please check here. Identity Server creates an Balana instance for evaluating XACML requests. Same as you can use Balana library with any platform that you prefer or else you can build your own XACML PDP, modifying it...