This plan should allow a maximum of two of six FreeIPA nodes to be unreachable without service interruption.
1 (Server) (all others are Replicas)
/|\
/ | \
6 | 2
|\ | /|
| \|/ |
| | |
| /|\ |
|/ | \|
5 | 3
\ | /
\|/
4
Replication Agreements (3 per node)
- Server <=> Replica
- n1 => n2
- n1 <= n2
- n1 => n4
- n1 <= n4
- n1 => n6
- n1 <= n6
- Replica <=> Replica
- n2 => n3
- n2 <= n3
- n2 => n5
- n2 <= n5
- n3 => n4
- n3 <= n4
- n3 => n6
- n3 <= n6
- n4 => n5
- n4 <= n5
- n5 => n6
- n5 <= n6
- https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/ipa-replica-manage.html
- https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/Setting_up_IPA_Replicas.html
- https://www.redhat.com/archives/freeipa-users/2014-March/msg00087.html
- https://danieljamesscott.org/11-articles/application-guides/26-freeipa-replication-monitoring.html