# Kibana balancing via VIP

**URL:** <https://discuss.elastic.co/t/kibana-balancing-via-vip/177260>\
**Category:** Kibana\
**Created:** [April 17, 2019, 10:02am UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260 "2019-04-17T10:02:14Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alessio\_Creo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alessio_creo/32/43381_2.png) [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Post date:** [April 17, 2019, 10:02am UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260/1 "2019-04-17T10:02:15Z")

</div>

Hi there,

I'm trying to balance two kibana instances running in different machine listening on [https://10.0.0.250:5601](https://10.0.0.250:5601) and [https://10.0.0.251:5601](https://10.0.0.251:5601). The network admin set a cirtix load balancer to redirect the network traffic via virtual IP **kibanamain**. When I conncect to **[https://kibanamain](https://kibanamain)** I'm redirected to the login page; but when I submit the credentials I'm redirected infinite time to the empty login page. What I am doing wrong? Follows the config taht I provide to the network admin and kibana.yml. Thank you.

kibana.yml

```
server.host: "0.0.0.0"

elasticsearch.username: "kibana"

elasticsearch.password: "kibana"

elasticsearch.hosts: ["http://10.0.0.250:9200"]

elasticsearch.requestTimeout: 60000

server.ssl.enabled: true

server.ssl.certificate: /Elastic/kibana-6.7.1-linux-x86_64/config/certs/cert.pem

server.ssl.key: /Elastic/kibana-6.7.1-linux-x86_64/config/certs/private_key.key

pid.file: /Elastic/kibana-6.7.1-linux-x86_64/logs/kibana.pid

```

citrix specs

**kibanamain** :

```
1. Protocol: HTTPS

2. Balancing: ROUND ROBIN

3. Persistence: DISABLED

4. Client Idle Time-out: 180''

5. Server Idle Time-out: 180''

6. http compression: ENABLED

7. Web Socket Connection: DISABLED

8. Check service:

Interval between checks: 5''

Response time-out: 2''

Retries: 3

Type: GET   

Link: https://10.0.0.250:5601, https://10.0.0.251:5601
```

---

<div class="post-metadata">

**Author:** ![sebastien](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sebastien/32/36119_2.png) [@sebastien](https://discuss.elastic.co/u/sebastien)\
**Post date:** [April 17, 2019, 11:08am UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260/2 "2019-04-17T11:08:13Z")

</div>

Hi @Alessio_Creo

Do the 2 instances share the same `xpack.security.encryptionKey`?

Cheers

---

<div class="post-metadata">

**Author:** ![Alessio\_Creo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alessio_creo/32/43381_2.png) [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Post date:** [April 17, 2019, 11:22am UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260/3 "2019-04-17T11:22:45Z")

</div>

Thank you for the answer. I've left the default settings, without specifying any config.

---

<div class="post-metadata">

**Author:** ![sebastien](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sebastien/32/36119_2.png) [@sebastien](https://discuss.elastic.co/u/sebastien)\
**Post date:** [April 17, 2019, 1:04pm UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260/4 "2019-04-17T13:04:28Z")

</div>

You will need to set the same encryption key on both instances.

Please refer to the docs for more information: [https://www.elastic.co/guide/en/kibana/current/using-kibana-with-security.html](https://www.elastic.co/guide/en/kibana/current/using-kibana-with-security.html)

Cheers

---

<div class="post-metadata">

**Author:** ![Alessio\_Creo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alessio_creo/32/43381_2.png) [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Post date:** [April 17, 2019, 1:52pm UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260/5 "2019-04-17T13:52:36Z")

</div>

Issue solved. The problem was in the Load Balancer config. I set the **Persistance** to `disabled` so the session wasn't saved and the blancer didn't "remember" that the user was logged in, so it was asking for credentials forever.

Thank you very much for the support.

---

<div class="post-metadata">

**Author:** ![sebastien](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sebastien/32/36119_2.png) [@sebastien](https://discuss.elastic.co/u/sebastien)\
**Post date:** [April 17, 2019, 1:53pm UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260/6 "2019-04-17T13:53:15Z")

</div>

Glad you got it solved. Happy to help

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 15, 2019, 1:53pm UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260/7 "2019-05-15T13:53:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.