Architecture and installation
Quick "all-in-one" installation.
To test JumpServer PAM, a single server is sufficient. The system can be deployed with a single «all-in-one» command, including the product and pre-configured database components.
No additional licenses are required for installation: JumpServer PAM can be installed on popular Linux distributions, including Astra Linux.
Installation instructions are available:
- in our knowledge base;
- in the Telegram channel @JumpServerPAM.
Support for external storage.
In «all-in-one» mode, JumpServer PAM stores session recordings and other metadata locally on the server where it was installed.
To avoid limiting the amount of stored session recordings to the local server, external storage can be connected. The following are supported:
- network locations accessible via the NFS protocol;
- any network storage supporting S3 and Ceph protocols;
- Swift, OSS, Azure, OBS, and COS storage.
Database clustering.
To ensure reliable storage of account data, connection logs, and configurations, it is recommended to deploy the database in clustering mode.
JumpServer PAM supports MySQL/MariaDB and PostgreSQL. Temporary
data is stored in Redis.
Both the database and Redis can be set up in cluster
mode by specifying the corresponding IP addresses
(or a common hostname) in JumpServer PAM’s
configuration.
High-availability cluster for JumpServer PAM.
To ensure high availability and handle a large number of simultaneous connections, you can deploy JumpServer PAM in cluster mode with horizontal scaling.
All editions of JumpServer PAM support installation in cluster mode.
For capacity planning for your cluster, refer to the tips in the Telegram channel @JumpServerPAM, the knowledge base, or contact us at info@afi-d.ru. Our specialists will help you design the architecture, calculate the required resources, and provide configuration recommendations.
Geo-replication and disaster-resistant deployment.
For large organizations, JumpServer PAM can be deployed in clustering mode with geo-replication.
This architecture ensures cluster functionality even if one data center becomes completely unavailable. It also improves response time and session performance by deploying interconnected clusters in the organization’s operational cities.
Configuring JumpServer PAM in geo-replication mode is a complex task. We recommend contacting us at info@afi-d.ru or collaborating with us and your IT integrator to design the architecture under the careful guidance of our specialists.
All editions of JumpServer PAM support deployment in disaster-resistant cluster mode.
Need help?
Support during the JumpServer PAM Enterprise Edition PoC
Have you started testing JumpServer PAM EE and encountered an issue? Our process includes organizing email threads or Telegram groups for prompt issue resolution. If you believe you were not added to such a group, please contact your supplier or reach out to us at support@afi-d.com
Training your specialists in configuring and administering JumpServer PAM
As part of an active technical support subscription, we will train your specialists in the installation, configuration, administration of JumpServer PAM, as well as recovery after errors and incidents.
Training is conducted online according to a pre-agreed plan and includes mandatory practical knowledge assessment with the issuance of personalized certificates (upon successful exam completion).
Video tutorials
Visit our channel on YouTube featuring video tutorials on configuring all sections of JumpServer PAM. The videos are updated with each new release.
Technical support for the free JumpServer PAM Community Edition
The idea of implementing a complex but business-critical PAM system can be intimidating due to the perceived complexity of system configuration, training administrators and security specialists, and changes to account management processes.
To make deployment and configuration of JumpServer Community Edition comfortable, and to ensure you can always get help from professionals, AFI Distribution offers an annual technical support subscription.
The support package priced at 1.5 million RUB per JumpServer Community Edition instance (with no limits on the number of users or target systems) includes everything required to use PAM:
- documentation and instructions;
- usage scenarios and recommended deployment architectures;
- training for administrators and information security specialists on working with JumpServer;
- tips and solutions for common questions;
- notifications about new releases with verified upgrade instructions;
- integration with RADIUS and multi-factor authentication “Multifactor” ;
- direct access to an engineer (no first-line support) with a clear SLA.
