Updated on 2024-12-02 GMT+08:00

Overview

Edge is a tool that collects information about your source environment and executes migration commands from MgC.

Feature Switches

The following table lists the Edge feature switches.

Parameter

Description

Value

Location

config.httpclient.verifier

Indicates whether to enable hostname verification, which is used to verify the certificates and domain names used in connections to Edge.

  • NoopHostnameVerifier: The verification is disabled.
  • MustHostnameVerifier: The verification is enabled.

<Installation path>\Edge\tools\SecAs-1.2.29\webmanagementapps\edge-server-0.0.1\WEB-INF\classes\application.yml

edge.plugin-ssl-mode

Indicates whether to use the SSL channel to receive Remote Procedure Call (RPC) connections.

  • true: The SSL channel is used to receive RPC connections.
  • false: The SSL channel is not used to receive RPC connections.

<installation-path>\Edge\tools\SecAs-1.2.29\webmanagementapps\edge-server-0.0.1\WEB-INF\classes\application.yml

Domain Names

The following table lists the domain names that Edge must be able to access.

Parameter

Description

Value

Location

edge.iot-host

The IoTDA service address

  • AP-Singapore:

    ssl://31f50f5a99.st1.iotda-device.ap-southeast-3.myhuaweicloud.com:8883

  • LA-Santiago:

    ssl://eee2b036e2.st1.iotda-device.la-south-2.myhuaweicloud.com:8883

  • LA-Sao Paulo:

    ssl://eee2b036e2.st1.iotda-device.sa-brazil-1.myhuaweicloud.com:8883

<installation-path>\Edge\tools\SecAs-1.2.29\webmanagementapps\edge-server-0.0.1\WEB-INF\classes\application.yml

edge.mgc-host

The MgC service address

  • AP-Singapore:

    https://mgc.ap-southeast-3.myhuaweicloud.com

  • LA-Santiago:

    https://mgc.la-south-2.myhuaweicloud.com

  • LA-Sao Paulo:

    https://mgc.sa-brazil-1.myhuaweicloud.com

edge.vars.sms-agent-url

The SMS bucket address

https://sms-resource-intl-ap-southeast-3.obs.ap-southeast-3.myhuaweicloud.com

edge.vars.sms-domain

The SMS public domain name

sms.ap-southeast-3.myhuaweicloud.com

Source servers must be able to access the domain names of cloud services listed in the following table.

Cloud Service

Domain Name

SMS

The SMS domain name is sms.ap-southeast-3.myhuaweicloud.com for all regions except LA-Sao Paulo.

The SMS domain name for the LA-Sao Paulo region is sms.sa-brazil-1.myhuaweicloud.com.

OBS

https://sms-resource-intl-ap-southeast-3.obs.ap-southeast-3.myhuaweicloud.com, which is the address for downloading SMS-Agent.

IAM

iam.myhuaweicloud.com and the IAM domain name for the target region. For details about the IAM domain name for each region, see Endpoints.

For example:

  • If the target region is AP-Singapore, source servers must be able to access iam.myhuaweicloud.com and iam.ap-southeast-3.myhuaweicloud.com.
  • If the target region is LA-Sao Paulo, source servers must be able to access iam.myhuaweicloud.com and iam.sa-brazil-1.myhuaweicloud.com.

ECS

The ECS domain name for the target region. For details about the ECS domain name for each region, see Endpoints.

For example:

  • If the target region is AP-Singapore, its domain name is ecs.ap-southeast-3.myhuaweicloud.com.
  • If the target region is LA-Sao Paulo, the ECS domain name is ecs.sa-brazil-1.myhuaweicloud.com.

IMS

The IMS domain name for the target region. For details about the IMS public name for each region, see Endpoints.

For example:

  • If the target region is AP-Singapore, its domain name is ims.ap-southeast-3.myhuaweicloud.com.
  • If the target region is LA-Sao Paulo, the IMS domain name is ims.sa-brazil-1.myhuaweicloud.com.

EVS

The EVS domain name for the target region. For details about the EVS domain name for each region, see Endpoints.

For example:

  • If the target region is AP-Singapore, its domain name is evs.ap-southeast-3.myhuaweicloud.com.
  • If the target region is LA-Sao Paulo, the EVS domain name is evs.sa-brazil-1.myhuaweicloud.com.

VPC

The VPC domain name for the target region. For details about the VPC domain name for each region, see Endpoints.

For example:

  • If the target region is AP-Singapore, its domain name is vpc.ap-southeast-3.myhuaweicloud.com.
  • If the target region is LA-Sao Paulo, its domain name is vpc.sa-brazil-1.myhuaweicloud.com.

Credentials Required for Data Collection

Edge can gather details of various resources, such as servers, databases, containers, VMware environments, and cloud platforms. You must provide Edge with the credentials accessing your servers, databases, containers, VMware platforms, and cloud platforms (AK/SK pairs).

Communication Matrix

The communication matrix lists the ports used by Edge for different purposes, along with the transport layer protocols, authentication types, and encryption modes.

Table 1 Edge communication matrix

Source Device

Source IP Address

Source Port

Destination Device

Destination IP Address

Destination Port

(for Listening)

Protocol

Port Description

Listening Port Configurable

Authentication Type

Encryption Mode

-

-

-

Server with Edge installed

IP address of the server with Edge installed

27080

HTTPS

Edge listening port, which is used for man-machine interaction.

No

Password

HTTPS

Server with Edge installed

Server with Edge installed

-

Server with Edge installed

IP address of the server with Edge installed

5678

TCP

Edge listening port, which is used for internal interaction between collectors and Edge.

No

None

None

-

Server

IP address of the destination server

User input

TCP

SSH port, which is used for file transfer (over SCP and SFTP) and execution of collection scripts.

Yes

Password

SSL

-

Server

IP address of the destination server

5985

TCP

WinRM port, which is used to remotely execute collection scripts.

No

Password

HTTPS

8080

Platform

IP address of the destination server

443

TCP

Listening port used for collecting VMware platform information. The source port is the default port that is inherited from the Wushan framework and is not used by services.

No

Password

HTTPS

8000

Database

IP address of the destination server

User input

TCP

Listening port of the database service. The source port is the default port that is inherited from the Wushan framework and is not used by services.

Yes

Password

SSL

7050

Container

IP address of the destination server

User input

TCP

Listening port of the container service. The source port is the default port that is inherited from the Wushan framework and is not used by services.

Yes

Key file

HTTPS

9977

Storage

IP address of the destination server

User input

TCP

Listening port of the object storage service. The source port is the default port that is inherited from the Wushan framework and is not used by services.

Yes

Password

SSL

Command Matrix

The command matrix lists the commands contained in Edge, as well as the absolute paths, functions, and usage of the commands.

Table 2 Edge command matrix

Node

Command

Absolute Path

Whether Can Be Invoked Independently

Function

Usage

Risk

Category

Edge

accountPermission.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries the roles assigned to the administrator user group.

.\accountPermission.ps1

None

Function

basicInfo.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries the basic information.

.\basicInfo.ps1

None

Function

checkBasicObjects.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Checks basic system components.

.\checkBasicObjects.ps1

None

Function

checkPerformanceObjects.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Checks basic system performance components.

.\checkPerformanceObjects.ps1

None

Function

diskInfo.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries basic disk information.

.\diskInfo.ps1

None

Function

eachDiskPerformance.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries disk performance information.

.\eachDiskPerformance.ps1

None

Function

fileSharingInfo.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries file system information.

.\fileSharingInfo.ps1

None

Function

fireware.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries firmware information.

.\fireware.ps1

None

Function

memorySize.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries memory information.

.\memorySize.ps1

None

Function

netcardInfo.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries NIC information.

.\netcardInfo.ps1

None

Function

netcardPerform.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries NIC bandwidth and PPS information.

.\netcardPerform.ps1

None

Function

oemSystem.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Checks the OEM system.

.\oemSystem.ps1

None

Function

osInfo.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries OS information.

.\osInfo.ps1

None

Function

processInfo.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries process information.

.\processInfo.ps1

None

Function

scheduledTasks.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries scheduled task information.

.\scheduledTasks.ps1

None

Function

specialHardware.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries hardware information.

.\specialHardware.ps1

None

Function

systemRoot.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries system directories.

.\systemRoot.ps1

None

Function

systemService.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Checks the VSS service.

.\systemService.ps1

None

Function

tcpNum.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries the number of connections.

.\tcpNum.ps1

None

Function

utilInfo.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Queries performance information.

.\utilInfo.ps1

None

Function

virtioDriver.ps1

/Edge/tools/plugins/collectors/rda-collector-server/powershell

Yes

Checks VirtIO drivers.

.\virtioDriver.ps1

None

Function

getArchitecture.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries OS architecture.

sh getArchitecture.sh

None

Function

getBootLoader.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the system boot type.

sh getBootLoader.sh

None

Function

getCPUCores.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the number of CPUs.

sh getCPUCores.sh

None

Function

getCpuFrequency.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the CPU dominant frequency.

sh getCpuFrequency.sh

None

Function

getCPURate.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the CPU usage.

sh getCPURate.sh

None

Function

getCPUtype.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the CPU type.

sh getCPUtype.sh

None

Function

getDisk_each_read_write_info.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the disk throughput.

sh getDisk_each_read_write_info.sh

None

Function

getDiskInfo.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the basic disk information.

sh getDiskInfo.sh

None

Function

getDiskUtil.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the disk usage.

sh getDiskUtil.sh

None

Function

getFileSharingInfo.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries file system information.

sh getFileSharingInfo.sh

None

Function

getFirmwareType.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the firmware type.

sh getFirmwareType.sh

None

Function

getGPUDevices.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries GPU devices.

sh getGPUDevices.sh

None

Function

getHostname.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the hostname.

sh getHostname.sh

None

Function

getMem.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries memory information.

sh getMem.sh

None

Function

getMemRate.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the memory usage.

sh getMemRate.sh

None

Function

getKernel.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the kernel information.

sh getKernel.sh

None

Function

getNetCards.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries NIC information.

sh getNetCards.sh

None

Function

getNetcardsInfo.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries NIC bandwidth and PPS information.

sh getNetcardsInfo.sh

None

Function

getOsDisk.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries system disk information.

sh getOsDisk.sh

None

Function

getOsInfo.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries OS information.

sh getOsInfo.sh

None

Function

getRawDevices.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries raw device information.

sh getRawDevices.sh

None

Function

getRsync.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Checks rsync.

sh getRsync.sh

None

Function

getProcessInfo.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries process information

sh getProcessInfo.sh

None

Function

getScheduledTasks.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries scheduled task information.

sh getScheduledTasks.sh

None

Function

getUSBDevices.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries GPU devices.

sh getUSBDevices.sh

None

Function

getTcpTotal.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the number of connections.

sh getTcpTotal.sh

None

Function

getVirtioDriver.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Checks VirtIO drivers.

sh getVirtioDriver.sh

None

Function

getVirtualType.sh

/Edge/tools/plugins/collectors/rda-collector-server/shell

Yes

Queries the virtualization type.

sh getVirtualType.sh

None

Function