Clustering for Axway products working with B2Bi

The following additional Axway products operate in clustered configurations with B2Bi:

  • Secure Relay
  • PassPort
  • Transfer CFT

Secure Relay

Secure Relay DMZ nodes in the demilitarized zone (DMZ) or perimeter network securely relay messages from partners to the trading engine in the protected, internal network. For security reasons, DMZ nodes do not initiate connections to the protected network. DMZ nodes also do not connect to the database or write messages to the file system. As it is stateless, messages cannot be lost when Secure Relay fails. Secure Relay, which uses Axway technology, supports inbound and outbound proxying.

An external load balancer is required, situated before the Secure Relay in the DMZ (in the case of multiple Secure Relay instances).

High availability behavior

When a node fails, the load balancer re-directs inbound connections to the remaining Secure Relay (if any). Trading engines then select the remaining Secure Relay for outbound flows.

If the connection between one Secure Relay (in the DMZ node) and all trading engine is gone, Secure Relay stops listening for external, inbound connections coming from partners and waits for the “internal” communication with at least one trading engine to be re-established.


Active / active is supported by PassPort. PassPort requires manual configuration and management.

If you have multiple PassPort nodes, a load balancer is required between B2Bi and PassPort.

High availability behavior

If a PassPort node fails, the load balancer detects the failure and redirects B2Bi requests to another available node.

Transfer CFT

A B2Bi cluster can interact with Transfer CFT (active/passive) using PeSIT on both the partner side and on the application side.

High availability behavior

If a B2Bi node fails:

  • For transfers initiated by B2Bi – another node takes over
  • For transfers initiated by Transfer CFT (sending, or polling) – Transfer CFT can define back-up addresses that enable Transfer CFT connection to a secondary node (back-up address ).

Related Links