The Challenge

Red Hat, one of the most successful and respected open source corporations in the world, offers enterprise IT solutions through its comprehensive portfolio of products and services. Building on its reputation for enterprise-grade reliability, it deployed Red Hat Single Sign-On (RH-SSO) as a secure and scalable single-sign-on solution for its customer-facing web properties. For multi-site hybrid cloud deployment of RH-SSO, Red Hat needed a secure datastore with built-in active-active replication – and looked to MariaDB TX with MariaDB Cluster (based on Galera Cluster).

Developing a More Secure Environment with Open Source

MariaDB was chosen, in part, due to its high security standards and features, including data-at-rest and data-in-motion encryption, authentication, and role-based access control.

For data at rest, tables, table spaces and log files can be encrypted with MariaDB TX, enabling end-user data to be more secure while reducing the need to handle encryption from within the application. For data in motion, SSL can enable encrypted connections using the TLS v1.2 protocol. Finally, for data in use, applications can use native encryption functions via SQL, giving them full control over what data is encrypted and when.

Galera Cluster Multi-Master Synchronous Replication Provides Resiliency

MariaDB TX Cluster enables Red Hat to operate its RH-SSO service in a truly resilient multi-site hybrid cloud architecture. MariaDB Cluster nodes deployed across multiple public cloud and data center sites replicate users’ authentication data using Galera Cluster. The multi-master synchronous replication technology means users’ authentication sessions are protected against interruption, even during a major data center site outage.

Download the Red Hat Case Study