hawkbit/site/content/guides/clustering.md

title, parent, weight

title	parent	weight
Clustering	Guides	33

hawkBit is able to run in a cluster. This guide provides insights in the basic concepts and how to setup your own cluster. You can find additional information in the hawkBit runtimes's README.

Big picture

Events

Event communication between nodes is based on Spring Cloud Stream. There are different binder implementations available. The hawkbit Update Server uses RabbitMQ binder.

You can run multiple instances of any micro-service, including those consuming events. However, the hawkbit-mgmt-server should typically be run as a single instance, as it schedules time-sensitive jobs such as auto-assignment checking and rollout execution. If multiple management server instances are needed, you must extend hawkBit to ensure that scheduled tasks do not run concurrently. Alternatively, configure all but one instance to disable scheduler execution.

Event Channel Types in Spring Cloud Stream

Remote events in hawkBit are distributed through two distinct types of channels:

1. Fanout Event Channel

• Every service instance listening to fanoutEventChannel receives a copy of every message, regardless of instance count.
• Common for events that should be processed by each consumer independently
  • In-memory cache updates
  • Internal state propagation
  • Logging or auditing
• Not recommended for scenarios where only one consumer should process an event (see serviceEventChannel for that).

Note: Every instance bound to this channel will get its own copy of the message.

2. Service Event Channel

The serviceEventChannel is used to ensure exclusive consumption of events across service instances. Only one instance per consumer group receives and processes each message, which is critical for non-idempotent or resource-sensitive operations.

• Only one instance in a consumer group receives each message.
• Ideal for external integrations, third-party API calls, or any task that must not be duplicated.
• Load-balanced across instances within the same group.

Optional Protostuff for Spring cloud stream

The micro-service instances are configured to communicate via Spring Cloud Stream. Optionally, you could use Protostuff based message payload serialization for improved performance.

Note: If Protostuff is enabled it shall be enabled on all microservices!

Add/Uncomment to/in your application.properties :

spring.cloud.stream.default.content-type=application/binary+protostuff

Add to your pom.xml :

<dependency>
    <groupId>io.protostuff</groupId>
    <artifactId>protostuff-core</artifactId>
</dependency>
<dependency>
    <groupId>io.protostuff</groupId>
    <artifactId>protostuff-runtime</artifactId>
</dependency>

Caching

Every node is maintaining its own caches independent of the other nodes. So there is no globally shared/synchronized cache instance within the cluster. In order to keep nodes in sync a TTL (time to live) can be set for all caches to ensure that after some time the cache is refreshed from the database. To enable the TTL just set the property " hawkbit.cache.ttl" (value in format dDhHmMsS).

Schedulers

Every node has multiple schedulers which run after a defined period of time. All schedulers always run on every node. This has to be kept in mind e.g. if the scheduler executes critical code which has to be executed only once. This is implemented via using, by default, distributed database based lock.

Known constraints

Denial-of-Service (DoS) filter

hawkBit owns the feature of guarding itself from DoS attacks, a DoS filter. It reduces the maximum number of requests per seconds which can be configured for read and write requests. This mechanism is only working for every node separately, i.e. in a cluster environment the worst-case behaviour would be that the maximum number of requests per seconds will be increased to its product if every request is handled by a different node. The same constraint exists with the validator to check if a user tried too many logins within a defined period of time.