Enable Appliances

Overview

Appliances (container providers in Appliance mode, see Provision the Appliance) connect to your Reemo infrastructure through the appliance portal, a dedicated service exposed on port 8444 of the portal.

This service is only deployed when the Appliance module is enabled at the instance level, through the Ansible role reemo-infra. This page describes how to enable it on an infrastructure that is already installed and initialized.

Configuration Variables

APPLIANCE_ENABLED

Enables the Appliance module for the instance. Boolean value (true / false). Default: false.

APPLIANCE_INIT_PORTALPORT

Public port of the appliance portal. Default: 8444.

APPLIANCE_INIT_PORTALURL

URL of the appliance portal. Default: PORTAL_URL:8444.

Enable the Appliance Module

  1. Add APPLIANCE_ENABLED: true to your Ansible inventory:

    infra_manager:  # or portal_manager, depending on your topology
  vars:
    APPLIANCE_ENABLED: true

  2. Rerun the reemo-infra role.

  3. Open verified_user Admin Area > shield Network & Security > vpn_lock Secure Gateways, then create a gateway with Type set to Container Provider Appliance. Under Configuration, set Secure Gateway Portal URL to the appliance portal URL (APPLIANCE_INIT_PORTALURL). See Secure Gateways for the form details.

You can then create a container provider in Appliance mode and deploy the appliance: see Provision the Appliance.

Points to Note

  • If you rerun the role with tags, include traefik: without it, the appliance portal entrypoint is not created and port 8444 stays closed.

  • Port 8444 must be reachable from the sites where the appliances are installed. See Appliances for monitoring checkpoints.