DataMiner Cloud Sharing – is there a document that describes the technology behind this?

Solved13.58K viewscloud sharing
12
0 Comments

I am looking for a document that describes the technology used by DataMiner Cloud Sharing:

  • security, encryption,
  • where is the DataMiner Cloud hosted?
  • what is the delay?
  • how about user rights?
  • what are the limitations?
Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 5th July 2023

2 Answers

13
5.70K 0 Comments

As the development of this feature has continued and brought a lot of changes I wanted to give an update on this question.

  • For security, we use a WebSocket connection between the DMS and our Cloud hosting. This ensures a secure connection and also makes it so our users of the Live Sharing feature do not need to open up ports to their network (which they like to keep very secure of course). The only thing that is necessary to be able to complete a cloud setup will be the white-listing of certain URLs.
  • The Dataminer Cloud is hosted in Azure and at the moment we are running everything in a Kubernetes Cluster so we can easily scale our services individually if necessary.
  • The delay will greatly depend on the distance between you and the DMS where the dashboard is present and the quality of the connection between the DMS where the dashboard is located and our Cloud hosting.
  • To access the cloud you will need to login through Azure B2C. Security will be managed on an organization and coordination level. A coordination is basically a registered DMS with some coordination users that are allowed to access that DMS through the cloud. For both organizations and coordination, we have set up some basic security roles (admin, owner, member). Later on, those might become configurable by the client (this will be much like in DataMiner where permissions can be toggled on or off).
  • Right now this feature still under soft-launch because .net core is needed on the system for our service that is integrated into DataMiner. Some more restrictions are present for using the Cloud Sharing within a cluster.
Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 5th July 2023
18
368 0 Comments

Since this feature is still heavily under development, not all your questions can be answered at this time.

Here is what we know right now:

  • The DataMiner will be connected to the cloud by a gRPC connection. This uses HTTP/2 and is encrypted by use of TLS.
  • Due to the use of HTTP/2, the cloud connection will only work if the DataMiner runs on Windows Server 2016 or higher.
  • All the services running in the cloud are connected with each other by use of a NATS Message Bus so the cloud can be scaled easily when needed.
  • Normal users accessing the cloud will be authenticated using AzureAD (in current testing phase only DCP accounts can be used) and will only have access to items that have been shared with them.

Information of this answer is no longer valid since development has progressed to an entirely different framework. For accurate information, see Baptiste's answer

Laurens Vergote [SLC] [DevOps Advocate] Edited answer 5th February 2021