CYGNA DDI SECURITY
DDI control plane resiliency with active monitoring and automated failover.
Cygna IPAM Failover appliances extend DDI resiliency from the data plane, which consists of multi-master DNS, HA-DNS, DHCP failover, DHCP cloning, and other resiliency mechanisms, to the control plane, comprised of the Cygna DDI Executive. While the data plane DHCP and DNS services run autonomously even should a Cygna IPControl Executive become unreachable, any IPAM administrator changes could be impacted. The Cygna IPAM Failover appliance automatically fails over to the backup for continuous operations across both planes.
Administrator-defined criteria enable defining of one or more outage conditions based on your risk assessment and tolerance. Criteria sets enable declaration of Executive services status and reachability conditions that would constitute a failure necessitating a failover. Conditions of given services can be logically compared (e.g., AND, NOT, etc.) to define criteria as simple as the unavailability of one service or the logically blended conditions of several services.
The Cygna IPAM Failover appliance is a separate appliance which monitors a pair of Cygna IPControl Executive systems. This “third party” perspective enables an independent evaluation of the status of each Executive, instead of relying of the pair of Executives themselves from performing such evaluations. After all, if an Executive is degraded but not “failed”, it may not relinquish control as the primary or administrator usability may diminish.
The Cygna IPAM Failover appliance executes the Executive failover upon detection of conditions matching a defined criteria set. Deployed DHCP and DNS services, whether running on Cygna Sapphire appliances, Rocky Linux, RedHat Linux, or Microsoft Windows, automatically detect the change in the available Cygna DDI Executive and connect to the currently active system. DDI administrators can also login to the backup Executive seamlessly thanks to DNS configuration.
Cygna IPAM Failover appliances are available as a Cygna Sapphire 10D or 20 model hardware appliance or in a virtualized form supporting the same diverse platforms as the Cygna Sapphire appliance family. Virtual platforms support includes VMware, KVM, Hyper-V, Xen, AWS, Azure, GCP and OCI. The Cygna IPAM Failover appliance need not be deployed in the same form as the Cygna IPControl Executives, which themselves may be diversely deployed.
Schedule your demo today to see what's possible.