Load Balancing

To improve high availability and/or scalability, you can load balance SOTI Cloud Link Agent communication using a common network appliance. While a combination of reverse proxy and load balancing is possible, the following example demonstrates a bare load balanced deployment.

In this topology, SOTI MobiControl makes requests to the load balancer, which balances the requests across multiple SOTI Cloud Link Agent. The load balancer is transparent to the SOTI MobiControl, therefore mutual authentication is formed between SOTI MobiControl and the SOTI Cloud Link Agent directly.

Note: SOTI Cloud Link Agent communication is stateless, so the use of sticky sessions can be avoided. It is therefore important that each SOTI Cloud Link Agent have the Server Certificate that matches the load balancer's fully qualified domain name.

The following diagram illustrates the Load Balanced SOTI Cloud Link Agent Communication deployment option.

Load Balanced SOTI Cloud Link Agent Communication

Network Requirements

The "Load Balanced SOTI Cloud Link Agent Communication Matrix" table represents the communication requirements for load balanced SOTI MobiControl to SOTI Cloud Link Agent communication.

Bold text indicates required communication. CLA = SOTI Cloud Link Agent

Protocol Source Port Destination Port
HTTPs SOTI MobiControl 443 Load Balancer 443
HTTPs Load Balancer 443 CLA Host 1 / 2 443
LDAPs CLA Host 1 / 2 636 AD 636
HTTPs CLA Host 1 / 2 443 ADCS 443
DCOM CLA Host 1 / 2 135 ADCS 135