I am wanting to make sure an environment is optimal for a new QlikView production environment. Any feedback it would be greatly appreciated.
It is a two node QlikView Server cluster. For now the second node is removed because we noticed some initial performance issues with the second node so we deactivated it for now while we try to validate the primary node. Two large servers are being used for the cluster. At this point we do not have a dedicated file share setup so we are using the first / primary node as the file share location. All of the services including QMS and a single publisher license has been established on this first node and any configurable path in QMC is pointing to the primary server using UNCs. The two servers are within the company's intranet. We have two smaller servers that will be used as external Web Servers that have been placed within the DMZ using QlikView Webserver. Ports have been opened for all the servers to talk with each other (at least all the ones that are needed). We are in the process of setting up SSL on the two web servers to do https.
Some initial oddities that have been noticed:
- When coming from internet to the WebServers everything works as desired (alternate login page to access point) but when a document is selected the user is prompted again for credentials before showing / opening the document.
- It is "appears" that when using the IE plugin by internal users to open a document that it is faster than through the ajax client. I believe the plugin won't work for internet clients because the port might still be blocked from direct access since QlikView server is internal and we are concerned with opening this to the world. (If not mistaken when using the plugin it bypasses the web server which is security concern.)
- As mentioned earlier, a significant lag on the web experience when the second node of cluster was enabled especially when a user was assigned to it but even when not. Initially just shutdown the QVS service on the second node when trying to figure things out but that didn't help either. Had to physically remove the node from the cluster within QMC to get basic response time back up for things like logging in and hitting access point.
The environment was built under the assumption that web servers should be within DMZ and remaining QlikView servers should not be. Is this what is recommended and best practice? Any additional suggestions and thoughts would be greatly appreciated!
This is all using 64bit QV 11.20 SR2.