A computer-implemented method comprising: configuring, by a network manager managing nodes in a node cluster, a first node to participate in the node cluster, wherein the first node is hosted by a first cloud service provider, and wherein participating in the node cluster includes performing one or more processing actions specific to the node cluster on data received by the first node; configuring, by the network manager, a second node to participate in the node cluster, wherein the second node is hosted by a second cloud service provider different than the first cloud service provider; designating, by the network manager, the first node hosted by the first cloud service provider as a master node, wherein the second node hosted by the second cloud service provider is designed as a slave node, and wherein the master node is configured to synchronize data on nodes of the node cluster; analyzing, by the network manager, network traffic received from the slave node hosted by the second cloud service provider to determine that the slave node is behind a firewall; and in response to determining that the slave node is behind a firewall, configuring, by the network manager, the slave node for a passive synchronization mechanism, wherein the passive synchronization mechanism is configured to allow the slave node to acquire synchronization data from the master node in the node cluster via a firewall, wherein the slave node is configured to send an outbound request to the master node before establishing a connection with the master node through the firewall to acquire the synchronization data according to the passive synchronization mechanism, configuring, by the network manager, other nodes in the node cluster to communicate with the slave node according to the passive synchronization mechanism, and configuring, by the network manager, an active synchronization mechanism for another node in the node cluster that is not behind a firewall for exchange of data with the master node. configuring, by a network manager managing nodes in a node cluster, a first node to participate in the node cluster, wherein the first node is hosted by a first cloud service provider, and wherein participating in the node cluster includes performing one or more processing actions specific to the node cluster on data received by the first node; configuring, by the network manager, a second node to participate in the node cluster, wherein the second node is hosted by a second cloud service provider different than the first cloud service provider; designating, by the network manager, the first node hosted by the first cloud service provider as a master node, wherein the second node hosted by the second cloud service provider is designed as a slave node, and wherein the master node is configured to synchronize data on nodes of the node cluster; analyzing, by the network manager, network traffic received from the slave node hosted by the second cloud service provider to determine that the slave node is behind a firewall; and in response to determining that the slave node is behind a firewall, configuring, by the network manager, the slave node for a passive synchronization mechanism, wherein the passive synchronization mechanism is configured to allow the slave node to acquire synchronization data from the master node in the node cluster via a firewall, wherein the slave node is configured to send an outbound request to the master node before establishing a connection with the master node through the firewall to acquire the synchronization data according to the passive synchronization mechanism, configuring, by the network manager, other nodes in the node cluster to communicate with the slave node according to the passive synchronization mechanism, and configuring, by the network manager, an active synchronization mechanism for another node in the node cluster that is not behind a firewall for exchange of data with the master node. configuring, by the network manager, the slave node for a passive synchronization mechanism, wherein the passive synchronization mechanism is configured to allow the slave node to acquire synchronization data from the master node in the node cluster via a firewall, wherein the slave node is configured to send an outbound request to the master node before establishing a connection with the master node through the firewall to acquire the synchronization data according to the passive synchronization mechanism, configuring, by the network manager, other nodes in the node cluster to communicate with the slave node according to the passive synchronization mechanism, and configuring, by the network manager, an active synchronization mechanism for another node in the node cluster that is not behind a firewall for exchange of data with the master node.