ACME Certificate Replication

Automatic replication of certificates for high-availability systems

The ACME Certificate Replication feature in anynode allows for automatically replicating certificates obtained via an ACME service to a replicated anynode system. This feature ensures that certificates are transferred seamlessly to all systems within a high availability (HA) scenario. By utilizing a pivoting IP address within anynode, the replication process maintains the redundancy and availability of certificates. This capability is particularly beneficial in environments with system replication, such as hot standby scenarios. In cloud environments like Azure and AWS, this is achieved using an upstream load balancer.

This feature automatically transfers ACME certificates to HA systems, eliminating the need for manual installation or updates. By automating the installation of ACME certificates on HA instances, the risk of failures is significantly reduced. This automation means that certificate updates and renewals only need to be performed once and will be replicated across the HA SBCs, reducing administrative effort and ensuring continuous system resilience and accessibility.

The main problem solved by this feature is the assurance of certificate availability and redundancy in HA scenarios, thereby enhancing the resilience and continuous accessibility of systems and services.

Characteristics

Automatic replication of ACME certificates
Support for high availability scenarios using a pivoting IP address
Enables use in system replication environments, such as hot standby
Applicable in cloud environments with an upstream load balancer

Benefits

There is no need for manual installation or updates of ACME certificates
Avoids failures through automated certificate installation on HA instances
Reduces administrative effort by centralizing certificate updates and renewals

Infographic: ACME certificate replication with anynode – The Software SBC. A certificate obtained by the primary anynode system via the anynode ACME service is replicated to the secondary anynode system.

ACME certificate replication with anynode – The Software SBC. A certificate obtained by the primary anynode system via the anynode ACME service is replicated to the secondary anynode system.

Animated GIF: A certificate obtained from the anynode main system via the anynode ACME service is replicated to the secondary anynode system and the correct replication is verified in Monitor Mode.

A certificate obtained from the anynode main system via the anynode ACME service is replicated to the secondary anynode system and the correct replication is verified in Monitor Mode.

Screenshot: Monitor mode in anynode – The Software SBC with display of the replicated certificate on the secondary anynode system.

Monitor mode in anynode – The Software SBC displays the replicated certificate on the secondary anynode system.

On the secondary system (Replica), the replicated ACME certificate is displayed in the Digital Identity tab within the Network Security Profile. The status message indicates that replication has exclusive access to this setting.