From 82a03f27294a27ae7d60af59c0ab3f7ea739edf0 Mon Sep 17 00:00:00 2001 From: cedricve Date: Mon, 4 Oct 2021 22:33:51 +0200 Subject: [PATCH] add howto --- content/_index.md | 4 +- content/kerberos-agent-edge.svg | 1922 +++++++++++++++++ content/prologue/deployments/index.md | 83 +- .../deployments/kerberos-agent-docker.svg | 432 ++++ .../deployments/kerberos-agent-edge.svg | 1922 +++++++++++++++++ .../deployments/kerberos-enterprise-suite.svg | 379 ++++ content/prologue/glossary/index.md | 14 +- content/prologue/how/hub-with-vault.svg | 591 +++++ content/prologue/how/index.md | 2 + 9 files changed, 5269 insertions(+), 80 deletions(-) create mode 100644 content/kerberos-agent-edge.svg create mode 100644 content/prologue/deployments/kerberos-agent-docker.svg create mode 100644 content/prologue/deployments/kerberos-agent-edge.svg create mode 100644 content/prologue/deployments/kerberos-enterprise-suite.svg create mode 100644 content/prologue/how/hub-with-vault.svg diff --git a/content/_index.md b/content/_index.md index 8af5509..ce635c5 100644 --- a/content/_index.md +++ b/content/_index.md @@ -37,9 +37,11 @@ While we moved forward our third mission is to scale, and make Kerberos reach fa Kerberos.io is a video analytics and monitoring platform, that is focussing on both end-consumer as enterprises. It comes with different solutions to support small deployments, a couple of camera streams and larger deployments, with multiple sites and thousands of camera streams. +{{< figure src="kerberos-agent-edge.svg" alt="A Kerberos Agent is monitoring a single camera stream." caption="A Kerberos Agent is monitoring a single camera stream." class="stretch">}} + With Kerberos.io you start small with one or more [Kerberos Agents](/opensource/first-things-first/), and grow over time while introducing more and more components like [Kerberos Factory](/factory/first-things-first/), [Kerberos Vault](/vault/first-things-first/) and [Kerberos Hub](/hub/first-things-first/), which is coined the [Kerberos Enterprise Suite](/enterprise/first-things-first/). Kerberos.io is shipped through the concept of container technology such as Docker and Kubernetes, and implements the ideas of bring your own cloud, bring your own storage and bring your own technology. -{{< figure src="./kerberos-global.svg" alt="A Kerberos agent consists of both a backend en frontend." caption="A Kerberos agent consists of both a backend en frontend." class="stretch">}} +{{< figure src="./kerberos-global.svg" alt="A scalable video platform for an ever-growing video landscape." caption="A scalable video platform for an ever-growing video landscape." class="stretch">}} The whole idea is that any solution you will find at Kerberos.io, is extensible and allows you to integrate by default. For example, you decide where to deploy the solutions (edge/cloud/hybrid), what storage you want (edge/cloud/hybrid), how to integrate it with other third-party solutions, etc. Every solution you'll find in the Kerberos.io space, ships Swagger APIs by default, and will allow you to build your own applications or integrations. diff --git a/content/kerberos-agent-edge.svg b/content/kerberos-agent-edge.svg new file mode 100644 index 0000000..9606cd5 --- /dev/null +++ b/content/kerberos-agent-edge.svg @@ -0,0 +1,1922 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/content/prologue/deployments/index.md b/content/prologue/deployments/index.md index 7b6a345..45abed0 100644 --- a/content/prologue/deployments/index.md +++ b/content/prologue/deployments/index.md @@ -13,87 +13,36 @@ weight: 103 toc: true --- -In this section we will explain some usecases and best practices, which might help you to define the architecture that fits your needs. +In this section we will explain some use cases and best practices, which might help you to define the architecture that fits your needs. > Please read the [introduction page](/prologue/introduction/) first, before moving forward. -When starting with Kerberos you might ask yourself, how should I deploy these so called, Kerberos agents? Well, there are different options. You can install a Kerberos agent on a Raspberry Pi, VM, Server or even in a Kubernetes cluster. So what should you do, and when? Let's have a closer look at the different options. +When starting with Kerberos you might ask yourself, how should I deploy these so called, Kerberos Agents? Well, there are different options. You can install a Kerberos Sgent on a Raspberry Pi, VM, Server or even in a Kubernetes cluster. So what should you do, and when? Let's have a closer look at the different options. -The first thing you need to consider is the environment, in which you want to deploy your Kerberos agents. Is it inside your house, your company or at a public place? Another important factor is the number of surveillance cameras you would like to monitor, and if you have any high availability requirements. +The first thing you need to consider is the environment, in which you want to deploy your Kerberos Agents. Is it inside your house, your company or at a public place? Another important factor is the number of camera streams you would like to monitor, and if you have any high availability requirements. -## Agents on-premise +## Kerberos Agents -The most common scenario is to install your Kerberos agents on-premise. This has a couple of benefits such as latency, bandwidth and a less complex security model. When installing a Kerberos agent on-premise, you have a couple of different options. +The most common scenario is to install your Kerberos Agents at the edge. This has a couple of benefits such as latency, bandwidth and a less complex security model. When installing one or more Kerberos Agents at the edge, you have different options. -### Less than 5 cameras +### Less than 5 cameras streams -If you have a limited number of surveillance cameras you would like to monitor, and don't have any high availability requirements, the Kerberos Open Source agent is a good choice. For example, you can install the Kerberos Open Source agent on a Raspberry Pi, by using [KiOS](/opensource/installation#kios), [Raspbian OS](/opensource/installation-advanced#raspbian) or compile it from source. +If you have a limited number of cameras streams you would like to monitor, and don't have any high availability or scaling requirements, then multiple Kerberos Agents are a good choice. For example, you can install the Kerberos Agent on a Raspberry Pi, by using [KiOS](/opensource/installation#kios), [Raspbian OS](/opensource/installation-advanced#raspbian) or compile it from source. -On below architecture, a couple of Kerberos agents are installed on-premise (inside the local network). A Kerberos agent is installed for each surveillance camera, and each Kerberos agent runs on a seperate host (Raspberry Pi, VM, etc). The web interface of the Kerberos agents can be reached from the internal network, but cannot be accessed from the cloud. +On below architecture, a couple of Kerberos Agents are installed at the edge (inside the local network). A Kerberos Agent is installed for each camera stream, and each Kerberos Agent runs on a separate host (Raspberry Pi, VM, etc). The front-end of the Kerberos Agents can be reached from the internal network, but cannot be accessed from the internet. -{{< figure src="onpremise-less-then-5.svg" alt="Having just a single or two camera(s) to be monitored then Kerberos Opensource might be the right choice." caption="Having just a single or two camera(s) to be monitored then Kerberos Opensource might be the right choice." class="stretch">}} +{{< figure src="kerberos-agent-edge.svg" alt="A Kerberos Agent is monitoring a single camera stream." caption="A Kerberos Agent is monitoring a single camera stream." class="stretch">}} -Another option to install the Kerberos Open Source agent is to use Docker. Instead of having seperate hosts for each Kerberos agent, you will have a single host (Docker host) with multiple Docker containers. A Docker container is deployed for each surveillance camera, which contains the software to run the Kerberos agent. +Another option to install the Kerberos Agent is to use Docker. Instead of having separate hosts for each Kerberos Agent, you will have a single host (Docker host) with multiple Docker containers. A Docker container is deployed for each camera stream, which contains the software to run the Kerberos Agent. -Running your Kerberos agents inside Docker containers, allows you to process multiple surveillance cameras using only one host. +Running your Kerberos Agents inside Docker containers, allows you to process multiple surveillance cameras using only one host. -{{< figure src="onpremise-less-then-5-docker.svg" alt="Having just a few of cameras to be monitored then Kerberos Opensource with Docker might be the right choice." caption="Having just a few of cameras to be monitored then Kerberos Opensource with Docker might be the right choice." class="stretch">}} +{{< figure src="kerberos-agent-docker.svg" alt="Having just a few of cameras to be monitored then Kerberos Agent on Docker might be the right choice." caption="Having just a few of cameras to be monitored then Kerberos Opensource with Docker might be the right choice." class="stretch">}} -### More than 5 cameras +### More than 5 camera streams -When working within an enterprise context, where you require high availability and have a large amount of surveillance cameras being monitored, [Kerberos Enterprise](/enterprise/first-things-first) is a good choice. Im comparison to the Open Source version, Kerberos Enterprise uses Kubernetes to help you scale (and secure) your video surveillance landscape. Kerberos agents, or Kubernetes deployments, are deployed inside your cluster and load balanced over the different nodes. When a Kerberos agent dies, or the node on which the deployment is running, Kubernetes will reschedule it to another healthy node. +Having more camera streams and Kerberos Agents will become a bit tedious to manage, and you might start looking for other solutions in terms of scaling and also storage. -{{< figure src="onpremise-more-then-5.svg" alt="When you start having bigger deployments it's recommended to go with a Kubernetes approach." caption="When you start having bigger deployments it's recommended to go with a Kubernetes approach." class="stretch">}} +When having more than 5 [Kerberos Agents](/opensource/first-things-first/), the Kerberos Enterprise Suite starts to become interesting. While building on Kubernetes, your Kerberos Agents will be scheduled and deployed more easily through [Kerberos Factory](/factory/first-things-first/). Your recordings will be stored centrally using [Kerberos Vault](/vault/first-things-first/), and you will be able to review every thing from within a single pane of glass with [Kerberos Hub](/hub/first-things-first/). -## Agents in the cloud - -Instead of processing your surveillance cameras on-premise you could also process them in the cloud. There are a couple advantages, for example, you don't have to manage your own hardware, you can simply spin up a VM on one of the hyperscalers, and add it to your existing cluster. - -When dealing with Kerberos agents in the cloud, the complexity starts with the security model. As your surveillance cameras are running somewhere on-premise, you will need to make them available to your Kerberos agents, which are running in the cloud. There are several ways to do that, such as port forwarding (not recommended) or setting up a site-to-site VPN (recommended). - -When setting up a VPN connection you will expose your surveillance cameras to your Kerberos agents. Once you've configured the Kerberos agents, data will flow through this secure tunnel, from on-premise to your cloud enviroment. - -### Less than 5 cameras - -If you have a limited number of surveillance cameras you would like to monitor, and don't have any high availability requirements, the Kerberos Open Source agent is a good choice. You can install the Kerberos Open Source agent on Docker. Instead of having seperate VM's for each Kerberos agent, you will have a single VM (Docker host) with multiple Docker containers. A Docker container is deployed for each surveillance camera, which contains the software to run the Kerberos agent. - -{{< figure src="cloud-less-then-5.svg" alt="By using port forwarding or a VPN tunnel you can start processing your camera streams in the cloud." caption="By using port forwarding or a VPN tunnel you can start processing your camera streams in the cloud." class="stretch">}} - -### More than 5 cameras - -Similar to [Kerberos Enterprise](/enterprise/first-things-first) on-premise, you can run the a Kubernetes in the cloud. The exact same solution is available, only the way how you connect to your video surveillance cameras will be different, as they will probably live in a different network. To make this work you will need to setup a VPN tunnel (or whatever your security teams have defined as a back practice). When [Kerberos Enterprise](/enterprise/introduction) is deployed to the cloud, it can be used any where. Public cloud (AWS, Google, Azure, etc) or private cloud. You can run it where you want. - -{{< figure src="cloud-more-then-5.svg" alt="As previous mentioned you could process them in a Kubernetes cluster in the cloud." caption="As previous mentioned you could process them in a Kubernetes cluster in the cloud." class="stretch">}} - -## Kerberos Hub - -Once you've configured one of the previously mentioned architectures, you will have one or more Kerberos agents running, in the cloud or on-premise. - -The Kerberos Open Source agent comes with a web interface, which makes it possible to review the activity for that specific agent; they don't have a consolidated overview. This means that you will need to open multiple web interfaces, one for Kerberos agent. In contrary Kerberos Enterprise agents, don't come with a web interface, therefore the Kerberos Hub (public or private edition) is recommended. - -To simplify this process and resolve some other challenges, Kerberos Hub was developed. - -> [Kerberos Hub](https://app.kerberos.io) is a cloud solution which allows you to have a single overview of all the media recordings generated by your surveillance cameras. It's not a solution for processing your surveillance cameras in the cloud. For processing of your surveillance cameras, a Kerberos agent is used. - -A brief list of the key features of Kerberos Hub are: - -- Secured storage -- Consolidated overview -- Advanced searching -- Machine learning -- Alerts -- Live streaming -- Accounts -- Logging - -> Checkout [the demo environment](https://app-demo.kerberos.io) to see and feel the Kerberos Hub solution yourself. - -### Architecture - -A simplified architecture is found below. In this architecture the Kerberos agents are installed on-premise (but this could also be in the cloud), next to the surveillance cameras. Once one of the agents recorded a footage it will send the recording to our [Kerberos Vault](/vault/first-things-first) service, using the credentials you've defined inside the agent. - -As soon as the recording is successfully received several engines will be executed, that will further process the recording and extract metadata from it (classification, origin of the surveillance camera, etc). A lot of processing is happening behind the scenes. - -By using a browser you can navigate to Kerberos Hub, and review all the recordings made by the Kerberos agents on-premise. On top of that you will receive more context about the recordings, get notifications, view a livestream and much more. Read more about [Kerberos Hub](/hub/first-things-first). - -{{< figure src="deployment-hub-vault.svg" alt="As previous mentioned you could process them in a Kubernetes cluster in the cloud." caption="As previous mentioned you could process them in a Kubernetes cluster in the cloud." class="stretch">}} +{{< figure src="kerberos-enterprise-suite.svg" alt="When you start having bigger deployments it's recommended to go with a Kubernetes approach." caption="When you start having bigger deployments it's recommended to go with a Kubernetes approach." class="stretch">}} diff --git a/content/prologue/deployments/kerberos-agent-docker.svg b/content/prologue/deployments/kerberos-agent-docker.svg new file mode 100644 index 0000000..9f814ca --- /dev/null +++ b/content/prologue/deployments/kerberos-agent-docker.svg @@ -0,0 +1,432 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/content/prologue/deployments/kerberos-agent-edge.svg b/content/prologue/deployments/kerberos-agent-edge.svg new file mode 100644 index 0000000..9606cd5 --- /dev/null +++ b/content/prologue/deployments/kerberos-agent-edge.svg @@ -0,0 +1,1922 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/content/prologue/deployments/kerberos-enterprise-suite.svg b/content/prologue/deployments/kerberos-enterprise-suite.svg new file mode 100644 index 0000000..ddd23da --- /dev/null +++ b/content/prologue/deployments/kerberos-enterprise-suite.svg @@ -0,0 +1,379 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/content/prologue/glossary/index.md b/content/prologue/glossary/index.md index 0d94fef..107ca65 100644 --- a/content/prologue/glossary/index.md +++ b/content/prologue/glossary/index.md @@ -15,16 +15,6 @@ toc: true While working in the Kerberos Ecosystem, specific words and sentences become to start feel natural. Unfortunately that's not the case for everyone, that's why we added and updated this glossary page, to anyone can come back to this if he would require more detailed explanation. -## Agent +## Kerberos Agent -An agent is a collection of binaries, shipped in different forms such as Docker, Balena, etc). It executes specific tasks related to the camera processing, monitoring, configuration and reviewing. - -There are two types of agents: an Open Source agent and an Enterprise agent. - -### Open Source agent - -The Open Source agent is a binary, shipped in different forms such as docker, KiOS, source code, which is Open Source and can be used for any purpose (commercial and non-commercial). - -### Enterprise agent - -The Enterprise agent is proprietary, closed source solution, available as a Docker image and optimised to be deployed in a Kubernetes or K3S cluster. +A Kerberos Agent is a collection of binaries, shipped in different forms such as Docker, Balena, etc). It executes specific tasks related to the camera processing, monitoring, configuration and reviewing. diff --git a/content/prologue/how/hub-with-vault.svg b/content/prologue/how/hub-with-vault.svg new file mode 100644 index 0000000..f8709c5 --- /dev/null +++ b/content/prologue/how/hub-with-vault.svg @@ -0,0 +1,591 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/content/prologue/how/index.md b/content/prologue/how/index.md index bd8735d..1cc369b 100644 --- a/content/prologue/how/index.md +++ b/content/prologue/how/index.md @@ -29,6 +29,8 @@ As soon you will process more [Kerberos Agents](/opensource/first-things-first/) One or more [Kerberos Agents](/opensource/first-things-first/) are perfect for a small scale deployment. The disadvantage, when running a couple of Kerberos Agents, is that an agent is designed to handle a single camera stream. This means if you would like to have an overview of all your [Kerberos Agents](/opensource/first-things-first/), you will need to open multiple interfaces or build something yourself. Another disadvantage is the network, typically a Kerberos Agent is on a local network, and not accessible from the internet. This requires port-forwarding, or a VPN tunnel to properly secure and access them. +{{< figure src="hub-with-vault.svg" alt="Kerberos Vault connected to Kerberos Hub." caption="Kerberos Vault connected to Kerberos Hub." class="stretch">}} + To overcome these disadvantages a tool, [Kerberos Hub](/hub/first-things-first/), was developed that allows to connect a couple, or a thousand of video stream to a single pane of glass. The idea is that you can use either the [Kerberos Hub Saas offering](/hub/first-things-first/) or the [Kerberos Hub self-hosted](/hub/first-things-first/) version, depending on your needs. [Kerberos Hub](/hub/first-things-first/) comes with features to manage cameras in groups or sites, view livestreams, delegate access of a subset of cameras to specific accounts, filtering through machine learning, etc.