# External services, coordination ensemble and load balancers

*Tableau Architect Study Guide · Deploy Tableau Server · Last updated November 13, 2026 · https://www.certifyforce.com/study-guide/tableau-architect/deploy-tableau-server/external-services-coordination-ensemble-and-load-balancers*

How to configure External File Store, an external PostgreSQL repository and Independent Gateway, deploy a Coordination Service ensemble (including core-exempt Coordination Service-only nodes), assign Backgrounder node roles, and set Tableau Server up behind reverse proxies and load balancers.

- Certification: Salesforce Tableau Architect
- Exam section: Deploy Tableau Server
- Study guide: https://www.certifyforce.com/study-guide/tableau-architect

**Official exam objective:**

> 2.1 Implement production-ready Tableau Server deployments: 2.1.1 Deploy and configure Tableau Server: 2.1.1.1 Configure an external file store, 2.1.1.2 Configure an external repository, 2.1.1.3 Configure an external gateway, 2.1.1.4 Configure an unlicensed node, 2.1.1.5 Configure a coordination ensemble, 2.1.1.6 Configure a backgrounder process with a specific node role, 2.1.1.7 Configure Tableau for a load balancer; 2.1.2 Install in an air-gapped environment; 2.1.3 Validate a disaster recovery/high availability test strategy; 2.1.4 Perform a blue-green deployment; 2.1.5 Locate and interpret Tableau Server installation logs; 2.1.6 Install and configure Resource Monitoring Tool server and agents; 2.1.7 Plan and implement automated deployment (using a script, that is, Silent Installer).

## What the exam expects

- Configure External File Store and an external PostgreSQL repository at the right point of a new installation.
- Install and enable Independent Gateway (the external gateway) with a compatible version and a correct enabling JSON file.
- Deploy a Coordination Service ensemble, including on unlicensed (core-exempt) Coordination Service-only nodes added through the TSM CLI.
- Assign a Backgrounder node role with `tsm topology set-node-role` and judge whether a topology allows it.
- Configure Tableau Server for a load balancer and reverse proxy chain, including headers that Tableau Mobile needs.
- Topics 2.1.2-2.1.7 are taught in Air-gapped, blue-green, RMT agent and silent installs; ensemble sizing is in Process counts, node roles and external services.

Key terms:
- **External File Store:** a network share replacing the local File Store process.
- **External repository:** a PostgreSQL instance outside Tableau Server holding the repository.
- **Independent Gateway:** a standalone gateway on its own computer in front of the cluster.
- **Coordination Service ensemble:** 1, 3 or 5 Coordination Service (ZooKeeper) instances that hold quorum and the topology's source of truth.
- **Node role:** a per-node limit on which jobs its Backgrounder runs.

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Refresh temp space | Up to three times an extract's final file size | [External File Store install](https://help.tableau.com/current/server/en-us/server_external_filestore_storage_new_install.htm) |
| Storage enable argument | `--network-share` is required | [tsm topology](https://help.tableau.com/current/server/en-us/cli_topology_tsm.htm) |
| Standalone repository | `generic` flavor; `rails` is reserved for RDS | [External repository install](https://help.tableau.com/current/server/en-us/server_external_repo_new_install.htm) |
| Gateway version | Major version must match; maintenance match recommended | [Independent Gateway install](https://help.tableau.com/current/server/en-us/server_tsig_new_install.htm) |
| Gateway JSON port and protocol | Match `TSIG_HK_PORT` and `TSIG_HK_PROTOCOL` | [Independent Gateway install](https://help.tableau.com/current/server/en-us/server_tsig_new_install.htm) |
| Failed ensemble deploy | `tsm topology cleanup-coordination-service` removes it | [Deploy an Ensemble](https://help.tableau.com/current/server/en-us/distrib_ha_zk.htm) |
| Coordination-only nodes | Not counted against core-based licensed cores | [Coordination Service-Only Nodes](https://help.tableau.com/current/server/en-us/distrib_ha_external_zk.htm) |
| Sole Backgrounder node | Must run all jobs | [Node Roles](https://help.tableau.com/current/server/en-us/server_node_roles.htm) |
| Mobile response header | `X-Tableau: Tableau Server` on all HTTP responses | [Proxies and Load Balancers](https://help.tableau.com/current/server/en-us/proxy.htm) |
| Load balancer endpoint | Single URL in `gateway.public.host` | [Add a Load Balancer](https://help.tableau.com/current/server/en-us/distrib_lb.htm) |

## Check yourself

- Why might an architect move Coordination Service onto dedicated nodes when servers barely exceed minimum hardware?
- When does the `repository_backup` folder appear on an External File Store share?
- Why does the External File Store page suggest an Active Directory security group for share access?
- What must a gateway that authenticates users return to Tableau Mobile requests?

## Sources

- [Install Tableau Server with External File Store](https://help.tableau.com/current/server/en-us/server_external_filestore_storage_new_install.htm)
- [Install Tableau Server with External PostgreSQL Repository](https://help.tableau.com/current/server/en-us/server_external_repo_new_install.htm)
- [Install Tableau Server with Independent Gateway](https://help.tableau.com/current/server/en-us/server_tsig_new_install.htm)
- [Deploy a Coordination Service Ensemble](https://help.tableau.com/current/server/en-us/distrib_ha_zk.htm)
- [Configure Tableau Server for High Availability with Coordination Service-Only Nodes](https://help.tableau.com/current/server/en-us/distrib_ha_external_zk.htm)
- [Workload Management through Node Roles](https://help.tableau.com/current/server/en-us/server_node_roles.htm)
- [tsm topology](https://help.tableau.com/current/server/en-us/cli_topology_tsm.htm)
- [Add a Load Balancer](https://help.tableau.com/current/server/en-us/distrib_lb.htm)
- [Configuring Proxies and Load Balancers for Tableau Server](https://help.tableau.com/current/server/en-us/proxy.htm)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 13 linked practice questions, and unlimited timed mock exams are included with the Tableau Architect pack (USD $19): https://www.certifyforce.com/practice-exams