---
schema_version: "1"
id: 562d294c2390d44a01f372d3b2b93831cb2e6602f4f31cd974ad0f0ddc5b3dd4
title: Managed Omni Gateway High Availability and Disaster Recovery Deployments
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/gateway/latest/gateway-architecture-managed-dr-ha.md
canonical_url: https://docs.mulesoft.com/gateway/latest/gateway-architecture-managed-dr-ha
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 333b6a5e72581b281a11049563146c77a198492470aa8935fc118776f4b6c7ab
description: MuleSoft Documentation Site
release: "1.14"
latest: true
---
---
product: Omni Gateway
version: 1.14
is-latest-version: true
---

# Managed Omni Gateway High Availability and Disaster Recovery Deployments

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

CloudHub 2.0 and Runtime Fabric manage Managed Omni Gateway replica deployments and control the
gateway’s high availability and disaster recovery. To learn about how these deployment targets
handle disaster recovery and high availability not specific to Omni Gateway, familiarize yourself
with [CloudHub 2.0 High Availability and Disaster Recovery](https://docs.mulesoft.com/cloudhub-2/ch2-ha-dr).

High availability and disaster recovery are handled the same across all gateway sizes. Autoscaling
behavior differs by size. All sizes run at least two replicas across availability zones, but only
large and extra large gateways autoscale to add replicas based on CPU usage.

This diagram shows how multiple Managed Omni Gateway replicas are deployed.

![External traffic flows through CloudHub 2.0 Ingress to a Kubernetes service that distributes requests across multiple Managed Omni Gateway replicas](/mulesoft/current/en-us/gateway/latest/_images/managed-high-availability.png)

External traffic entering through private space ingress is distributed across a kubernetes service
of Managed Omni Gateway instances. Replicas share the gateway configuration and data that must
persist in a Kubernetes resource. Replicas share HTTP caching and distributed rate limiting data
directly with each other.

> [!NOTE] The diagram shows CloudHub 2.0 ingress. For Runtime Fabric, you must configure your own
> ingress. Your ingress must terminate TLS before forwarding the request to the Managed Omni
> Gateway.

## Managed Omni Gateway High Availability

The private space manages Managed Omni Gateway high availability by ensuring:

- At least two Omni replicas are always available and distributed across different availability
  zones in the private space. Traffic is distributed to replicas and zones evenly using a round
  robin traffic distribution.

  - If a replica fails, a new replica is spawned. While respawning the replica, the outstanding
    replicas receive a temporary spike in traffic until the new replica can accept traffic. These
    short spikes in traffic are visible in monitoring as a temporary spike in CPU usage.

  - Overloaded gateways don’t abruptly stop incoming traffic processing as a result of overload.
    However, overloaded gateways show gradual degradation of response time for requests until CPU
    subsides.

- Large and extra large Managed Omni Gateways have more capacity allocated per replica and autoscale
  by adding replicas across availability zones depending on CPU usage.

## Managed Omni Gateway Configuration Storage

Managed Omni Gateway stores API configurations locally in the private space kubernetes service.
Locally stored configurations enable the gateway to start faster than an equivalently configured
Self Managed Omni Gateway (that needs to download the configuration from Anypoint upon start).
Locally stored configurations provide a layer of resiliency in the unlikely event that the Anypoint
control plane isn’t reachable during Managed Gateway startup.

Managed Omni Gateway does not store contracts locally. Upon starting, Managed Omni Gateway downloads
contracts from Anypoint Platform. If an API uses contracts, for example if the client ID enforcement
policy is applied, the gateway downloads the contracts before accepting traffic.