Typical deployment variant

Option description

A typical ROBIN Orchestrator installation involves deploying the required services on two servers. Such an installation will be sufficient for stable operation of the platform components in the absence of specific requirements of information security services to fault tolerance and redundancy. If such requirements exist, we recommend to consider the Cluster installation option

The installation is performed from the distribution kit using the instructions (included with the distribution kit) and automated Ansible scripts.

The diagram shows the placement of components and their interaction flows:

Network accesses

For correct functioning of the system components, network communication between them must be allowed and the list of the following ports must be open.
In case of network remoteness of the operation loop from the orchestrator server, it is necessary to ensure that the orchestrator is available on the ports listed below (if network access restriction systems are used).

Servers	Ports	Obligation
Server 1	• tcp/22 – ssh	Necessary for the initial setup of the platform
	• tcp/10990 – Java Wildfly App – Application	Obligatory during the operational phase
	• tcp/9443 - Java Wildfly App – Application	Obligatory during the operational phase
	• tcp/5671 – AMQPS -RabbitMQ – Message queue	Obligatory during the operational phase
	• tcp/80, 443 HTTP/HTTPS – Application	Obligatory during the operational phase
	• tcp/15671 – RabbitMQ – Message queue	Necessary for the initial setup of the platform
	• tcp/5044 - Logstash	Obligatory during the operational phase
	• tcp/5601 - Kibana	Obligatory during the operational phase
	• tcp/9200 - Elasticsearch	Obligatory during the operational phase
	• tcp/8443 HTTPS – Application	Obligatory during the operational phase
	• tcp/8081,8441 – Nexus – Package manager	Obligatory during the operational phase
	• tcp/5432	Obligatory during the operational phase
	• tcp/22 – ssh	Necessary for the initial setup of the platform
	• tcp/80, 443 HTTP/HTTPS – Application	Obligatory during the operational phase
	• tcp/8443 HTTPS – Application	Obligatory during the operational phase
	• tcp/9443 - Java Wildfly App – Application	Obligatory during the operational phase
	• tcp/5671 – AMQPS -RabbitMQ – Message queue	Obligatory during the operational phase
	• tcp/5044 – Logstash - Logs	Obligatory during the operational phase
Client hosts	• 3389 - rdp	Obligatory for the operation of ROBIN RDP Manager

Minimum hardware and software requirements

Minimum hardware requirements:

Characteristics	Minimum requirements
Characteristics	Server 1	Server 2
Number of CPU threads (vCPU - core thread)	4 vCPU	4 vCPU
Amount of RAM	20 Gb	8 Gb
Disk subsystem capacity (HDD)	200 Gb	20 Gb

Minimum program requirements:

Server	Resource
Server 1	Debian 10, Astra Linux SE 1.7, RedOS 7.3 and others by agreement
	Nginx 11 and higher
	Nexus 3.32.0 and higher
	PostgreSQL 10 x86_64 and higher
	WildFly 26.1.3 final and higher
	Java bellsoft-jdk17.0.7
	KeyCloack 21.1.1 (The directory server must be deployed on Windows Server 2008 or higher for the enterprise AD integration to work properly)
	RabbitMQ ver. 3.8.2
	Logstash ver. 7.15
	Kibana ver. 7.15
	Elasticsearch ver. 7.15
Server 2	Debian 10, Astra Linux SE 1.7, RedOS 7.3 and others by agreement
Server 2	Haproxy 2.1.3 and higher

Дерево страниц