Unifyia Platform Multiserver Deployment

Unifyia platform can be deployed as a self-managed solution in either a cloud or on-premises environment using a multiserver deployment approach. In this deployment model, the Unifyia platform requires four servers, one each for database, authentication, certificate authentication, and application, to be deployed for its identity and access management operations. The servers form the foundation that ensures the platform functions seamlessly. A multiserver deployment involves distributing various components of the application across multiple servers to optimize resource utilization and improve reliability. This ensures high availability, scalability, and flexibility while allowing organizations to maintain full control over infrastructure, security, and compliance.

This page provides you a brief understanding of the multiserver deployment on cloud and on-premises to enable you to choose a deployment approach suitable for your organization. For more information, contact our team.

Refer to the Unifyia platform Cloud and On-premises architecture diagrams to get a brief understanding of how the various servers and microservices are integrated as a comprehensive solution for future-proof, agile identity and access management solution.

List of Servers

The following are the list of servers that are to be deployed as a apart of the cloud or on-premises, multiserver deployment approach.

• Database Server: A centralized database used to store user, device, and credentials information. It also allows users and applications to centrally access the data across the network.
• Authentication Server: A server used for authentication and verification of users and their issued identities.
• Certificate Authentication Server: A server used for the authentication of certificates to enable certificate-based login.
• Application Server: A server to host the various microservices as listed in the table below.

Key Deployment Features

Unifyia Platform Architecture

Cloud Architecture


On-Premises Architecture

Cloud Deployment Specifications

The following are the prerequisites for the cloud deployment:

• Install the required softwares.
• Create EC2 instances for the required servers with proper firewall (security groups) inbound rules to open the required ports internally in the network for the services to communicate with each other.
• Add the required DNS records in Route 53 or your domain.
• A full certificate chain and private key certificates are required to establish a chain of trust.

EC2 Instances

EC2 instances are virtual servers in the cloud environment. To complete the Unifyia platform deployment, you need to create EC2 instances, one for each of the below-listed servers. The required specifications for the servers is listed in the

• Open VPN
• DB Server (PostgreSQL)
• Authentication Server
• Certificate Authentication Server
• Application Server
• Nginx Server

Server Specifications

The required server specifications are listed in the below table:

On-Premises Deployment

The following are the prerequisites for the on-premises deployment:

• Install the required softwares.
• Require four servers one each for database, authentication, certificate authentication, and application.
• Required ports to be available internally in the network for the servers and services to communicate with each other.
• Add the required DNS records of your servers in your local Windows machine host file.
• A full certificate chain and private key certificates are required to establish a chain of trust.

Server Specifications

The required servers - database, authentication, certificate authentication, and application server are to be deployed on four virtual machines. The minimum and Unifyia-recommended hardware specifications are provided in the below table.

Softwares

The following table lists the supported operating systems and the software packages required for the deployment: