WAN deployment model
The WAN deployment model illustrates a multi-site deployment of OneSpan Authentication Server, with data regularly replicated between the sites. Administration and reporting is handled at a single location. Other sites handle only authentication, signature validation, and provisioning requests.
Figure: WAN deployment model
OneSpan Authentication Server
One primary/backup pair of OneSpan Authentication Server instances at each non-administration site.
Data is stored in a commercial database on a dedicated database server at each site.
Failover is configured on each primary OneSpan Authentication Server instance for authentication requests only.
One administration site with a dedicated OneSpan Authentication Server instance for administration and reporting (with the Administration Web Interface installed).
All primary commercial database servers are replicating with each other and with the backup database server.
A dedicated database server is used for auditing data.
Administration
All administrative operations are performed on the administration server.
Long running operations taking quite some time can be performed with no direct impact on the authentication server performance handling authentication requests (these administrative operations will introduce only a replication impact on the commercial database servers).
The administration scenario could be disabled on both primary servers and backup servers to exclude administrative load. This is done via the Administration Web Interface.
Replication
Custom database replication is used over the virtual private network (VPN). OneSpan Authentication Server replication is disabled.
Auditing
Auditing data should be written to databases at each site. The data should be imported to the master auditing database at the administration site on a regular basis.
Reporting
Deployment steps
To set up the WAN deployment model
- Install a commercial database on each dedicated database server, and modify the schema as needed.
- Set up replication between the databases.
- Install OneSpan Authentication Server on each primary server and the backup server, using the Advanced installation option.
- Configure database load sharing on each OneSpan Authentication Server instance.
- Install a database on the audit server.
- Set up auditing as required.
- Configure reporting as required.
- Make auditing data available for reporting, i.e. schedule to merge the primary server's audit data with the backup server auditing data using the Maintenance Wizard.