# Active - Active: On-Prem Datacenters ## For ESX/KVM/Hyper-V virtual platforms Cloudbrink Connector component is needed for providing secure zero-trust access to private applications hosted inside the customers private networks. Cloudbrink supports access to private networks in a physical on-prem datacenter or virtual CSP hosted datacenter such as VPC/VNET on AWS, Azure or GCP. From 14.3 release, Cloudbrink will support Connector deployments in Active-Active mode on on-premises environments, apart from the earlier modes of Standalone or Active-Standby. The Active-Active mode of deployment is available on on-prem environments from the 14.3release only. ### Points to note: · Up to 64 Connector instances can be clustered in one logical Active-Active Connector group. · When a new Connector instance is added to an existing Active-Active Connector group, new user sessions will be loaded on to the new instance until the load is evenly balanced. Existing sessions on the existing instances will not be touched. ·When an existing Connector instance becomes unavailable for any reason, the user sessions on the particular Connector instance will be re-distributed across the remaining available instances. · When user sessions are re-distributed, user need not re-authenticate to Cloudbrink. The user's authentication session will remain intact. ·The network level TCP connections will be terminated when the user session is re-distributed to other instances. Applications such as SSH or FTP need to be re-established. Web sessions will see short disruption but continue to work after re-distribution. ·User sessions are distributed across Connector instances based on the session load of the Connector instance. ### Use Cases: ### A. Horizontal Scaling Customers having high scale requirements can use the Active-Active mode of deployment to support large number of users. With Active-Active mode, customers can start with a limited number of Connector instances and as the users grow, more Connector instances can be added to support the new scale requirements. ### B. Availability Active-Active mode of Connectors can be used for increasing the availability. When one Connector instance becomes unavailable, the load on that instance will be distributed across all the remaining available instances. This helps in ensuring that in case of an incident, there are multiple other instances to take over the load without burdening one single instance (standby). ### Deployment Steps: #### i) Create Active-Active Connector on Cloudbrink Admin Portal a. Navigate to Admin Portal → Configure → Resources → Connectors → Add b. When adding a new Connector, select "Deployment Mode" as Active-Active. For on-premises Connector deployments, "Hosting Environment" and "Region" parameters should be set as "Private" c. Configure the User-IP-Management method that would be used for assigning datacenter IPs to the remote user sessions. i. In Active-Active mode, 3 User IP Management options are supported 1. DHCPv4 (only IPv4 address will be assigned) 2. DHCPv4v6 (both IPv4 and IPv6 addresses will be assigned) 3. Static IP Pool (sys-admin manually configures the IP ranges for each Device-User-Group) d. When Static IP Pool method is used, sys-admin must select the list of Device-User-Groups that will use this Connector for accessing private applications. As part of the Device-User-Groups selection, "Pool Names" and "Lease-Time" for each Device-User-Group must be configured. e. Configure the other parameters (DNS Servers, Enterprise Resources) as usual. f. Save the Connector ![](https://web-api.textin.com/ocr_image/external/4f4b736d68aea36c.jpg) ![](https://web-api.textin.com/ocr_image/external/e5e609412a74fbc5.jpg) For Static-IP-Pool method ![](https://web-api.textin.com/ocr_image/external/f4522434bbabae14.jpg) ii) **Deploy Connector instances from the Hypervisor Management Console** a. Provision the Connector VMs on the hypervisor (ESX or KVM or Hyper-V) virtual hosts b. As part of the cloud-init script, provide correct input parameters such as IP address, Gateway, and the OTP generated from the Cloudbrink Admin Portal for this Connector c. Once Connector instance deployment is successfully completed on the hypervisor, Cloudbrink Admin Portal will show the instance in "OOnline" status ### Connector list ![](https://web-api.textin.com/ocr_image/external/c17a4a8ea4c198f0.jpg) ### Instance level list for each Connector ![](https://web-api.textin.com/ocr_image/external/b5cf8b4f04a3081b.jpg) ### iii) ONLY for Static-IP-Pool: Configure Static IP Pools for Connector instances on Cloudbrink Admin Portal a. Navigate to the Connector instances of the Active-Active Connector by clicking on the Name of the Active-Active Connector b. Under each Connector instance, the Pool Names that are specified at the Connector level will be prepopulated c. For each Pool Name, define the IPv4 and IPv6 Pools. ### Per instance IP prefix configuration ![](https://web-api.textin.com/ocr_image/external/f3d5dcfee8359dcf.jpg) ### iv) Verify the Connector instance status a. All Connector instances must be in "Active" status. Active status indicates that Connector is ready for handling user traffic to the private applications ![](https://web-api.textin.com/ocr_image/external/d2f7b5a016c5b06f.jpg) --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.cloudbrink.com/configuration/connector-deployment/active-active-on-prem-datacenters.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.