Multi-Node Manager

Vulnerability ProtectionDeep Security Manager can be run as multiple nodes operating in parallel using a single database. Running the Manager as multiple nodes provides increased reliability, redundant availability, virtually unlimited scalability, and better performance.

Each node is capable of all tasks and no node is more important than any of the others. Users can sign in to any node to carry out their tasks. The failure of any node cannot lead to any tasks not being carried out. The failure of any node cannot lead to the loss of any data.

Each node must be running the same version of the Manager software. When performing an upgrade of the Manager software, the first Manager to be upgraded will take over all Vulnerability ProtectionDeep Security Manager duties and shut down all the other Vulnerability ProtectionDeep Security Manager nodes. They will appear as "offline" in the Network Map with Activity Graph in the System Activity panel of the System Information page with an indication that an upgrade is required. As the upgrades are carried out on the other nodes, they will automatically be brought back online and begin sharing in the Manager tasks.

Viewing Nodes

The Network Map with Activity Graph in the System Activity panel on the System Information page displays all Vulnerability ProtectionDeep Security Manager nodes along with their status, combined activity and jobs being processed.

The Vulnerability ProtectionDeep Security Manager processes many concurrent activities in a distributed pool that is executed by all online Manager nodes. All activity not derived from User input is packaged as a job and thus "runnable" on any Manager (with some exceptions for "local" jobs that are executed on each node, like cache clearing).

The Network Map with Activity Graph

The Network Map with Activity Graph displays a map of all installed Manager nodes and their current status as well their relative activity over the last hour. The nodes can be in the following states:

All Vulnerability ProtectionDeep Security Manager nodes periodically check the health of all other Vulnerability ProtectionDeep Security Manager nodes. If there is a loss of connectivity with any Vulnerability ProtectionDeep Security Manager node that lasts longer than three minutes, the node is considered offline and its tasks are redistributed among the remaining nodes.

Jobs by Node

This chart breaks down the number of jobs carried out over the last hour by each node.

The Jobs by Type

This chart breaks down the jobs carried out over the last hour by type.

Total Jobs by Node and Type

This chart displays the number of job types for each node over the last hour.

Adding Nodes

To add a Vulnerability ProtectionDeep Security Manager node to the system, run the Manager install package on a new computer. When prompted, type the location of and login credentials for the database being used. Once the installer connects to the database, you can proceed with adding the node to the system.

You must be using either MS SQL Server or Oracle Database to run multiple nodes.
At no point should more than one instance of the installer be running at the same time. Doing so can lead to unpredictable results including corruption of the database.

Decommissioning Nodes

To decommission a node:

A node must be offline (uninstalled or service halted) to be decommissioned.
  1. In the Vulnerability ProtectionDeep Security Manager, go to Administration > Manager Nodes.
  2. Double click on the Manager node you want to decommission to display its Properties window.
  3. Click the Decommission button in the Options area.