Guacamole

HA Apache Guacamole — Nginx + MariaDB Galera Cluster (IaC)

Status: in progress.

A resilient remote-access gateway built so that no single component — web tier, application tier, or database — is a single point of failure:

  • Multiple Guacamole nodes behind an Nginx load balancer, so a node failure doesn’t take down access
  • MariaDB Galera cluster as the authentication/connection database backend — synchronous multi-master replication, no single DB instance to lose
  • Session recording for connection auditing and compliance
  • Infrastructure as Code — the whole stack defined and reproducible, not hand-built

The interesting part of this project isn’t installing Guacamole — that’s well documented. It’s getting the Galera cluster quorum right (odd node count, proper arbitrator handling) and making sure failover at every layer — Nginx, Guacamole, and the database — actually works under a node failure, not just in theory.