Fault Tolerant Configuration

Fault tolerance is deployed using two TIBCO Enterprise Message Service™ Appliances which are started at the same time and communicate over a cabled connection.

Each appliance contains a primary EMS server instance and a secondary server instance that is activated in the event of a failure of its primary instance. All switches and EMS clients are connected to both appliances, allowing the secondary server instance to take over from the primary instance in the event of a failure.

In Fault Tolerant mode, data gets replicated between the active and standby EMS servers. So, both servers must be running and replicating when making configuration changes using Central Administration or the admin tool.

Note: All appliances in a fault tolerant configuration should be of the same model, either standard or high performance. The F64 and E28Q chassis types should not be mixed in a fault tolerant configuration. For example, if the appliance that contained the primary server is an E28Q, then the appliance containing the secondary server should also be an E28Q. For best results, both appliances should also use the same TIBCO Enterprise Message Service™ Appliance software version.