Can you load balance the servers running the security token server ( STS ) service with Windows NLB?
Does anyone have experience doing this?
Thanks in advance,
Rus
I haven't done Windows NLB balancing, but I'm not aware of any reasons why federated security would load balance any differently from any other kind of message security. If you need non-sticky sessions or sessionless operation see this doc for how to remove secure conversation from WSFederationHttpBinding; creating an equivalent secure conversation security binding element with requireCancellation = false will allow clients to roam between services as well. In the latter case plugging in a custom security state encoder is recommended.
We're about to move to our test environment, which includes all farmed app servers. I wasn't sure how complex it was going to be to make our federated setup work with the load balancing.
I'll report back on how things go...
Rus
