SecHard
1.3. SECHARD's Infrastructure
SECHARD is a Docker container-based software with a modern software architecture. SECHARD has ready-made OVA templates suitable for virtualization infrastructures. If these templates are exported to the virtualization environment, the SECHARD server is available for use. There are 24 containers in SECHARD server and each service runs on separate containers. A problem on one container does not affect other containers.
Şekil 3 - Docker Container
Şekil 4 - Docker Images
Container Name | Role | |
---|---|---|
1 | sechard_tftp | It is used for backup restore and firmware upgrade. |
2 | sechard_winrm_api | It is used to manage Windows server and client operating systems. |
3 | sechard_mongo | The application is used as a database. |
4 | sechard_tacacs | It is used for Externel Aut. to network devices and manages all AAA operations. |
5 | sechard_syslog | It is used to collect SYSLOGs from network devices and generate alarms. |
6 | sechard_remote_desktop | It is used to access Windows server and client operating systems with RDP. |
7 | sechard_agent | It is used to manage access between all containers. |
8 | sechard_console_agent | Linux server is used to access network devices and resources that support Telnet and SSH. |
9 | sechard_queue_worker | The batch command is used to perform all operations that are executed or scheduled. |
10 | sechard_web | It is used for web access to SecHard. |
11 | sechard_discovery | It is used to perform AD, Vmware and Network discover operations. |
12 | sechard_proxy | Telnet is used to perform SSH accesses directly through the SecHard server. |
13 | sechard_redis | It is used as a cache server. |
14 | sechard-monitoring-alertmanager | It is used for Windows, Linux server performance alarm structure. |
15 | sechard-monitoring-mongodbexporter | Mongo is used for database monitor. |
16 | sechard-monitoring-redisexporter | Redis is used for monitoring. |
17 | sechard-monitoring-cadvisor | Grafana is a monitoring application. |
18 | sechard-monitoring-prometheus | This is the application where Exporter data is kept. |
19 | sechard-monitoring-nodeexporter | Used to generate SecHard server monitoring metrics. |
20 | sechard-monitoring-bullexporter | Grafana monitoring uygulamasıdır. |
21 | sechard-monitoring-pushgateway | Grafana is a monitoring application. |
22 | sechard-monitoring-grafana | It is used for Grafana integration and dashboards. |
23 | sechard-monitoring-snmpexporter | It is used to monitor network devices with snmp. |
24 | sechard-monitoring-loki | Loki container is used to collect log data. |
25 | sechard-monitoring-promtail | Grafana is a monitoring application. |
SECHARD is published on Docker Hub. Companies with Kubernetes or Swarm style conternet orchestration can download SECHARD from Docker Hub and easily use it in Scale Up architecture.
SecHard