Imperva Cyber Community

communities_1.jpg
Β View Only
  • 1.  Advice on Gateway clustering

    Posted 09-01-2025 22:31

    Hi All,

    My current setup consists of a single MX and 3 pairs of gateways. Each gateway pair serves different region ( R1,R2,R3) and has agents connected to it via HA agent method. We are currently onboarding DB servers from another two regions (R4,R5). Since GW7/8, GW9/10 is a new deployment, we wanted to make it gateway cluster as agent HA is deprecated.

    For example,
    GW1/2 , GW3/4, GW5/6 pair are existing one and current on HA agent. (We are planning to make them cluster in the future due to operation impact.)
    GW7/8, GW9/10 are the new pairs, and we intend to make them cluster.

    Eg.
                                   MX
                                      |
    GW1\2   GW3/4   GW5/6   GW7/8   GW9/10
          |             |             |                 |               |
        R1         R2         R3              R4           R5


    Basic Configuration Guidelines for Gateways, Management Servers and Agents
    I have read through the basic guidelines above and one single MX is able to support up to 20 gateways. My concern is whether the MX will be overload if I were to do it like 6 gateways (GW1/2, GW3/4, GW5/6) + 2 clusters (GW7/8, GW9/10).

    Or in the future

    5 clusters of 2 GWs.

    Any advice is appreciated.


    #DatabaseActivityMonitoring

    ------------------------------
    Jia Jie Lian
    DAM engineer
    Sumitomo Mitsui Banking Corporation - (SMBC) - SG
    SINGAPOE
    ------------------------------


  • 2.  RE: Advice on Gateway clustering

    Posted 09-11-2025 09:20

    Hello Jia Jie Lian,

    Based on my understanding, a gateway cluster can be configured with more than two gateways. This means that if you want to set up a cluster, it could include configurations like 2 GWs + 1 GW, or more, depending on the design and requirements.

    Additionally, according to the article you shared: https://docs-cybersec.thalesgroup.com/bundle/v14.19-dam-user-guide/page/431.htm

    It appears that only one cluster is supported per management server (MX).



    ------------------------------
    Regards,
    𝐌𝐒𝐭𝐞𝐬𝐑 𝐌𝐞𝐑𝐭𝐚
    Senior Security Consultant
    Mumbai
    ------------------------------