Overview

Edge is a tool that collects information about your source environment and executes migration commands from MgC.

Feature Switches

The following table lists the Edge feature switches.

Parameter	Description	Value	Location
config.httpclient.verifier	Indicates whether to enable hostname verification, which is used to verify the certificates and domain names used in connections to Edge.	NoopHostnameVerifier: The verification is disabled. MustHostnameVerifier: The verification is enabled.	<installation-path>\Edge\tools\SecAs-1.2.29\webmanagementapps\edge-server-0.0.1\WEB-INF\classes\application.yml
edge.plugin-ssl-mode	Indicates whether to use the SSL channel for tunneling Remote Procedure Call (RPC) connections.	true: The SSL channel is used to tunnel RPC connections. false: The SSL channel is not used to tunnel RPC connections.	<installation-path>\Edge\tools\SecAs-1.2.29\webmanagementapps\edge-server-0.0.1\WEB-INF\classes\application.yml

Domain Names

The following table lists the domain names that Edge must be able to access.

Parameter	Description	Value	Location
edge.iot-host	The IoTDA service address	AP-Singapore: ssl://31f50f5a99.st1.iotda-device.ap-southeast-3.myhuaweicloud.com:8883 LA-Santiago: ssl://eee2b036e2.st1.iotda-device.la-south-2.myhuaweicloud.com:8883 LA-Sao Paulo: ssl://eee2b036e2.st1.iotda-device.sa-brazil-1.myhuaweicloud.com:8883 TR-Istanbul: ssl://aa6d529566.st1.iotda-device.tr-west-1.myhuaweicloud.com:8883	<installation-path>\Edge\tools\SecAs-1.2.29\webmanagementapps\edge-server-0.0.1\WEB-INF\classes\application.yml
edge.mgc-host	The MgC service address	AP-Singapore: https://mgc.ap-southeast-3.myhuaweicloud.com LA-Santiago: https://mgc.la-south-2.myhuaweicloud.com LA-Sao Paulo: https://mgc.sa-brazil-1.myhuaweicloud.com TR-Istanbul: https://mgc.tr-west-1.myhuaweicloud.com
edge.vars.sms-agent-url	The SMS bucket address	https://sms-resource-intl-ap-southeast-3.obs.ap-southeast-3.myhuaweicloud.com
edge.vars.sms-domain	The SMS domain name	sms.ap-southeast-3.myhuaweicloud.com

Source servers must be able to access the domain names of cloud services listed in the following table.

Cloud Service	Domain Name
SMS	SMS domain name for all regions except LA-Sao Paulo: https://sms.ap-southeast-3.myhuaweicloud.com:443 SMS domain name for LA-Sao Paulo: https://sms.sa-brazil-1.myhuaweicloud.com:443
OBS	https://sms-resource-intl-ap-southeast-3.obs.ap-southeast-3.myhuaweicloud.com:443, which is the address for downloading SMS-Agent.
IAM	iam.myhuaweicloud.com and the IAM domain name for the target region. For details about the IAM domain name for each region, see Endpoints. For example: If the target region is AP-Singapore, source servers must be able to access https://iam.myhuaweicloud.com and https://iam.ap-southeast-3.myhuaweicloud.com:443. If the target region is LA-Sao Paulo, source servers must be able to access https://iam.myhuaweicloud.com and https://iam.sa-brazil-1.myhuaweicloud.com:443. If the target region is TR-Istanbul, source servers must be able to access https://iam.myhuaweicloud.com and https://iam.tr-west-1.myhuaweicloud.com:443.
ECS	The ECS domain name for the target region. For details about the ECS domain name for each region, see Endpoints. For example: If the target region is AP-Singapore, its domain name is https://ecs.ap-southeast-3.myhuaweicloud.com:443. If the target region is LA-Sao Paulo, the ECS domain name is https://ecs.sa-brazil-1.myhuaweicloud.com:443. If the target region TR-Istanbul, its domain name is https://ecs.tr-west-1.myhuaweicloud.com:443.
IMS	The IMS domain name for the target region. For details about the IMS domain name for each region, see Endpoints. For example: If the target region is AP-Singapore, its domain name is https://ims.ap-southeast-3.myhuaweicloud.com:443. If the target region is LA-Sao Paulo, its domain name is https://ims.sa-brazil-1.myhuaweicloud.com:443. If the target region TR-Istanbul, its domain name is https://ims.tr-west-1.myhuaweicloud.com:443.
EVS	The EVS domain name for the target region. For details about the EVS domain name for each region, see Endpoints. For example: If the target region is AP-Singapore, its domain name is https://evs.ap-southeast-3.myhuaweicloud.com:443. If the target region is LA-Sao Paulo, the EVS domain name is https://evs.sa-brazil-1.myhuaweicloud.com:443. If the target region TR-Istanbul, its domain name is https://evs.tr-west-1.myhuaweicloud.com:443.
VPC	The VPC domain name for the target region. For details about the VPC domain name for each region, see Endpoints. For example: If the target region is AP-Singapore, its domain name is https://vpc.ap-southeast-3.myhuaweicloud.com:443. If the target region is LA-Sao Paulo, its domain name is https://vpc.sa-brazil-1.myhuaweicloud.com:443. If the target region TR-Istanbul, its domain name is https://vpc.tr-west-1.myhuaweicloud.com:443.

Credentials Required for Data Collection

Edge can gather details of various resources, such as servers, databases, containers, VMware environments, and cloud platforms. You must provide Edge with the credentials accessing your servers, databases, containers, VMware platforms, and cloud platforms (AK/SK pairs).

Communication Matrix

The communication matrix lists the ports used by Edge for different purposes, along with the transport layer protocols, authentication types, and encryption modes.

**Table 1** Edge communication matrix
Source Device	Source IP Address	Source Port	Destination Device	Destination IP Address	Destination Port (for Listening)	Protocol	Port Description	Listening Port Configurable	Authentication Type	Encryption Mode
-	-	-	Server with Edge installed	IP address of the server with Edge installed	27080	HTTPS	Edge listening port, which is used for man-machine interaction.	No	Password	HTTPS
Server with Edge installed	Server with Edge installed	-	Server with Edge installed	IP address of the server with Edge installed	5678	TCP	Edge listening port, which is used for internal interaction between collectors and Edge.	No	None	None
		-	Server	IP address of the destination server	User input	TCP	SSH port, which is used for file transfer (over SCP and SFTP) and execution of collection scripts.	Yes	Password	SSL
		-	Server	IP address of the destination server	5985	TCP	WinRM port, which is used to remotely execute collection scripts.	No	Password	HTTPS
		8080	Platform	IP address of the destination server	443	TCP	Listening port used for collecting VMware platform information. The source port is the default port that is inherited from the Wushan framework and is not used by services.	No	Password	HTTPS
		8000	Database	IP address of the destination server	User input	TCP	Listening port of the database service. The source port is the default port that is inherited from the Wushan framework and is not used by services.	Yes	Password	SSL
		7050	Container	IP address of the destination server	User input	TCP	Listening port of the container service. The source port is the default port that is inherited from the Wushan framework and is not used by services.	Yes	Key file	HTTPS
		9977	Storage	IP address of the destination server	User input	TCP	Listening port of the object storage service. The source port is the default port that is inherited from the Wushan framework and is not used by services.	Yes	Password	SSL

Command Matrix

The command matrix lists the commands contained in Edge, as well as the absolute paths, functions, and usage of the commands.

**Table 2** Edge command matrix
Node	Command	Absolute Path	Whether Can Be Invoked Independently	Function	Usage	Risk	Category
Edge	accountPermission.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries the roles assigned to the administrator user group.	.\accountPermission.ps1	None	Function
	basicInfo.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries the basic information.	.\basicInfo.ps1	None	Function
	checkBasicObjects.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Checks basic system components.	.\checkBasicObjects.ps1	None	Function
	checkPerformanceObjects.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Checks basic system performance components.	.\checkPerformanceObjects.ps1	None	Function
	diskInfo.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries basic disk information.	.\diskInfo.ps1	None	Function
	eachDiskPerformance.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries disk performance information.	.\eachDiskPerformance.ps1	None	Function
	fileSharingInfo.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries file system information.	.\fileSharingInfo.ps1	None	Function
	fireware.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries firmware information.	.\fireware.ps1	None	Function
	memorySize.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries memory information.	.\memorySize.ps1	None	Function
	netcardInfo.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries NIC information.	.\netcardInfo.ps1	None	Function
	netcardPerform.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries NIC bandwidth and PPS information.	.\netcardPerform.ps1	None	Function
	oemSystem.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Checks the OEM system.	.\oemSystem.ps1	None	Function
	osInfo.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries OS information.	.\osInfo.ps1	None	Function
	processInfo.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries process information.	.\processInfo.ps1	None	Function
	scheduledTasks.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries scheduled task information.	.\scheduledTasks.ps1	None	Function
	specialHardware.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries hardware information.	.\specialHardware.ps1	None	Function
	systemRoot.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries system directories.	.\systemRoot.ps1	None	Function
	systemService.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Checks the VSS service.	.\systemService.ps1	None	Function
	tcpNum.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries the number of connections.	.\tcpNum.ps1	None	Function
	utilInfo.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Queries performance information.	.\utilInfo.ps1	None	Function
	virtioDriver.ps1	/Edge/tools/plugins/collectors/rda-collector-server/powershell	Yes	Checks VirtIO drivers.	.\virtioDriver.ps1	None	Function
	getArchitecture.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries OS architecture.	sh getArchitecture.sh	None	Function
	getBootLoader.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the system boot type.	sh getBootLoader.sh	None	Function
	getCPUCores.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the number of CPUs.	sh getCPUCores.sh	None	Function
	getCpuFrequency.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the CPU dominant frequency.	sh getCpuFrequency.sh	None	Function
	getCPURate.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the CPU usage.	sh getCPURate.sh	None	Function
	getCPUtype.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the CPU type.	sh getCPUtype.sh	None	Function
	getDisk_each_read_write_info.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the disk throughput.	sh getDisk_each_read_write_info.sh	None	Function
	getDiskInfo.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the basic disk information.	sh getDiskInfo.sh	None	Function
	getDiskUtil.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the disk usage.	sh getDiskUtil.sh	None	Function
	getFileSharingInfo.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries file system information.	sh getFileSharingInfo.sh	None	Function
	getFirmwareType.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the firmware type.	sh getFirmwareType.sh	None	Function
	getGPUDevices.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries GPU devices.	sh getGPUDevices.sh	None	Function
	getHostname.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the hostname.	sh getHostname.sh	None	Function
	getMem.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries memory information.	sh getMem.sh	None	Function
	getMemRate.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the memory usage.	sh getMemRate.sh	None	Function
	getKernel.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the kernel information.	sh getKernel.sh	None	Function
	getNetCards.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries NIC information.	sh getNetCards.sh	None	Function
	getNetcardsInfo.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries NIC bandwidth and PPS information.	sh getNetcardsInfo.sh	None	Function
	getOsDisk.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries system disk information.	sh getOsDisk.sh	None	Function
	getOsInfo.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries OS information.	sh getOsInfo.sh	None	Function
	getRawDevices.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries raw device information.	sh getRawDevices.sh	None	Function
	getRsync.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Checks rsync.	sh getRsync.sh	None	Function
	getProcessInfo.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries process information	sh getProcessInfo.sh	None	Function
	getScheduledTasks.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries scheduled task information.	sh getScheduledTasks.sh	None	Function
	getUSBDevices.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries GPU devices.	sh getUSBDevices.sh	None	Function
	getTcpTotal.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the number of connections.	sh getTcpTotal.sh	None	Function
	getVirtioDriver.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Checks VirtIO drivers.	sh getVirtioDriver.sh	None	Function
	getVirtualType.sh	/Edge/tools/plugins/collectors/rda-collector-server/shell	Yes	Queries the virtualization type.	sh getVirtualType.sh	None	Function