I'll add that the web server in Portal is active/active, so both machines take requests. Only one database is active, though, on the primary, so eventually all requests are directed to the primary.
The limitation is mostly on the database. The database, (postgres), only supports active/passive out of the box.
At 10.6.1, the failover time should be under a minute, typically 30 seconds or less. Prior to that, the failover time you see is expected.