Overview
DeepSource Enterprise Server is the self-hosted version of DeepSource for customers who have compliance or security needs that require them to operate within their firewall, in a private cloud (AWS, GCP, Azure), or in a data center.
DeepSource Enterprise Server can be set up in approximately 20 minutes and provides the same features as DeepSource’s cloud offering but operates within your private cloud.
License Key
A license key is required for on-premise deployments. Please request a license here (or) schedule a product demo to obtain a license.
System Overview
DeepSource Enterprise Server comes bundled with a host of services, which can be roughly divided into three categories:
Application Services
The DeepSource application is served by the application services.
| Service/Component | Description |
|---|---|
| bifrost | Frontend server |
| asgard-api | Backend for the DeepSource GraphQL API service |
| asgard-celery-* | Celery worker pools for asynchronous tasks |
| atlas | Orchestrator service that integrates with Kubernetes control plane for analysis, transformer, and Autofix™️ jobs |
| janus | Websocket server for realtime results feedback |
| mater | Watches for webhook failures from VCS providers and retries them |
Dependencies
The application services depend on these core services to function.
| Service/Component | Description |
|---|---|
| minio | Object storage for application assets |
| pgbouncer | Connection pooler for PostgreSQL database connections |
| RabbitMQ | Message Queue. Forms a critical bridge between all DeepSource application services. |
| Redis | Cache database |
KOTS Services
KOTS services are used to install and manage the DeepSource Enterprise Server installation. These services also enable updates to the system, as well as license management. More information about KOTS can be found here.
| Service/Component | Description |
|---|---|
| kotsadm | Admin console to install, configure and manage the DeepSource Enterprise Server installation |
| kurl-proxy | Proxy service for kotsadm (for standalone cluster installations) |
| kotsadm-minio | Object storage for the KOTS Admin Console (for existing cluster installations) |
| kotsadm-rqlite | RQLite database service for KOTS admin console |
Network connectivity
Ingress
DeepSource Enterprise Server installation can be kept behind network firewalls with zero-to-limited ingress. Typically, customers keep their installation behind a VPN.
Egress
On non-airgapped installations, the DeepSource Enterprise Server makes outbound connections to the following:
- Our image registry, through
proxy.replicated.com - The DeepSource Cloud instance, for raising support tickets and reporting false positives
- Sentry, if enabled
and more. Here is an exhaustive list.