Edge Device Management at scale

Product Suggestions
1

Our context:
We have +50 edge device to manage and monitor, across +15 sites +3 countries.

Processes that we need or want to cover:

  • Password management and renewal (our policy is password rotation every 6 month, store in a vault)
  • Certificate HTTPS setup and yearly renewal
  • Edge configuration (store configuration in a central repository and able to reinstall remotely an edge using configuration file)
  • NodeRed Setup and Flow deployment
  • Monitor & Alert : get edge device status, logs, OS version

As other solution we manage, if some remote cmd SSH or API are available on the Tulip edge device, it will help us to manage those process. (for example, for certificat, you have already provide us a script).
For NodeRed, here our challenge:

  • Setup: today NodeRed run on Edge is unsecure http. For us, it is mandatory that we could get access to setting and activate secure protocol.
  • Deployement of Flow: Today on NodeServer that we manage (not NodeRed on Edge Tulip), we store and deploy flow with script. No don’t see toda, added value to use Flowfuse.
    For Logs: we use Datadog for log analysis, monitoring and alert. Does an agent Datadog could be install?

Thanks for your help!

2

Hi Nicolas! Thanks for this feedback. @jakerigos and team are looking into this more and will follow up with any additional questions for you.

1 Like
3

For your information, we find a way to manage at scale:

  • password change
  • certificat with the future ACME feature
    From now, our most important topics is on the management of NodeRed (secure (https) and flow deployement). If we could have a chance to exchange on this topics soon, it will help us.
4

Thanks @Nicolas for following up here. Would you be able to share how you are managing password changes and certificates at scale? That will be very helpful for us to understand.

If easier to discuss in a quick call, we can do that as well :slight_smile:

@jakerigos is out of office this week, but he should be able to follow up here next week.