Overview
Enlighted Edge alters the existing Enlighted architecture by adding a new, separate data path from the Enlighted Gateway to the Enlighted Edge device. In the diagram below, the new data path to the Enlighted Edge is shown in orange below.
Edge Connection Procedure
After booting, the Gateway will check its configuration to see if Edge is enabled. If so, it will begin to listen on port 8443 for incoming connections from Edge. Using the Manage APIs, Edge obtains a list of all available Gateways and their associated IP addresses. Edge will make repeated connection attempts to each Gateway. After the connection succeeds, Gateways will begin streaming data to the Edge device. At this point, if the connection is lost, Edge will begin the connection process again to the Gateway.
Gateway Connection Security
The connection between a Gateway and Edge is mutually authenticated with X.509 certificates, and the data in the connection is encrypted with TLS 1.2. If the certificate on the Edge device cannot be validated or is incorrect, the connection will fail.
NOTE: The certificate must be current and valid for the authentication procedure to succeed.
Enabling Edge on Gateways
To start sending data to the Enlighted Edge appliance, the Gateways must be “switched” to send data to it. All Gateways with firmware versions after 3.6 contain the required code, which is disabled until the correct configuration is pushed to the device. This is done with a special Firmware Configuration bundle for the initial versions of Edge that is downloaded from the Enlighted Edge Dashboard on the X300 during deployment.
Please contact Support for help and to ensure that the Enlighted Gateways are upgraded with the Edge Firmware Configuration Bundle described below.
Firmware Configuration Bundle (FCB)
The Firmware Configuration Bundle (FCB) enables Edge connection with Enlighted Gateway. It loads required certificates for Edge connection and is applied as a firmware upgrade through Enlighted Manage. The bundle is unique for each X300 device.
The FBC contains the following configuration:
-
Enables the Edge connection with Enlighted Gateway.
-
Load the required certificates for Edge connection.
-
The FBC, 0_0_0_enable_edge_gw.tar is loaded as a Firmware Upgrade through Manage. Refer to Upload Firmware File to Manage to upload the FCB to Manage.
-
0_0_0: bundle for Configuration upgrade.
-
enable_edge: Upgrade bundle functionality.
-
_gw.tar: Upgrade bundle that can be applied to a Gateway.
Please note that it will take up to five minutes after applying the upgrade for the Gateways to synchronize and establish the connection. When Edge successfully connects to the Gateway and data is flowing, the Gateway will appear online in the Edge dashboard.
