How to Configure an Edge Computing Service
Because containers follow the Open Container Initiative (OCI) standards and operate in protected environments autonomously, the Edge Computing service had to be implemented in a specific way to be manageable as a CGF service.
Therefore, the configuration of an Edge Computing service is split into the following steps:
Create the Edge Computing service.
Configure the Edge Computing service.
Decide if you want to save the configuration for later use or if you want to activate the configuration immediately.
Depending on your choice, select which of the next steps you want to proceed:
(Either): Activate the configuration for immediate use.
(Or): Save the configuration for later use without activating it.
Step 1. Create the Edge Service
Go to CONFIGURATION > Config Tree > Box > Assigned Services.
Expand the node Assigned Services.
Right-click Assigned Services.
From the list, select Lock.
From the list, select Create Service… .
The Create Service window is displayed.
For Service Name, enter the name for the Edge Computing service.
Click the drop-down menu for Software Module.
From the list, select Edge Computing.
(Optional) If you have configured multiple individual Shared IPs and if you want the service to listen to specific IP addresses:
Click the drop-down menu for Listening IP.
Depending on your requirements, click First, Second, or Explicit.
If you have clicked Explicit, click the green '+' for Explicit IPs.
Add the required IP address.
Repeat the previous substeps in step 10 for all required IP addresses.
Click Send Changes/ Activate.
Note that the configuration for Enable Service is already set to Yes.
Step 2. Configure the Edge Computing service
Step 2a. Prepare the Operational Setup Configuration
Expand the node at CONFIGURATION > Config Tree > Box > Assigned Services > Edge-Computing.
Right-click the node Edge Computing Configuration.
Click Lock.
Double-click Edge Computing Configuration.
The Edge Computing Configuration are is displayed.
Select Yes for Enable Edge Computing to get access to all necessary configuration fields.
For Registry, enter the URL for downloading the required container.
(Optional) If you want to to use an official CA certificate:
Click the blue arrow right to the drop down menu for Root CA Certificate to open the window for the Certificate Store.
Configure the required CA certificate if present.
(Optional) If you want to use a self-signed certificate:
Select the check box for Private (Insecure) Registry.
Enter the user name for User.
Enter the password for Password.
(Optional) If you want to specify more details for the container:
Enter the string that the container will execute upon its startup.
For Disk Space Quota (MB), enter the amount of memory in megabytes that you want to assign as disk space to the container.
Click the green '+' to add a key-value pair as an environment variable.
For Volume Mount Points, click the green '+' to add a mount point as a file-share to exchange data between the CGF and the container.
(Optional) Step 2b. Prepare the Network Setup
The network setup for the container network is already preset by default with the network 172.16.30.x in the respective fields.
If you want to use a different network for the container network, perform the following steps:
In the left navigation column, click Network Setup.
For Transfer Networkmask, select the size of bits from the drop-down menu.
For Transfer IP address Barracuda CloudGen Firewall, enter the IP address that serves as the gateway address on the CGF side.
For Transfer IP address Container, enter the IP address relating to the veth1 interface on the container side.
Passing traffic between the CGF and the container network must be allowed by an appropriate access rule called SRV-EDGECOMPUTING that is part of the firmware 10.0 release. However, note that this access rule comes deactivated as a default in order to not interfere with your present access ruleset.
Step 3. (Either): Activate the Configuration for Immediate Use
As mentioned in the introductory article Edge Computing, you can create multiple configurations for an Edge Computing service. However, due to resource restrictions, you must only use a single configuration at a time.
If you have multiple configurations present, and another configuration is already active, see the article How to Alternate Between Multiple Configured Edge Computing Services.
Alternatively, if you have only one configuration and you want to activate it, perform the followings steps to activate the configuration:
Go to CONFIGURATION > Config Tree > Box > Assigned Services > Edge-Computing > Edge Computing Configuration.
In the section Edge Computing Operation Settings, select Yes from the drop-down list for Enable Edge Computing.
Click Send Changes/Activate.
Go to the DASHBOARD to check the state of the Edge Computing service.
Optionally, you can check the logs of Edge Computing.
Step 4. (Or): Save the Configuration for Later Use Without Activating it
Go to CONFIGURATION > Config Tree > Box > Assigned Services > Edge-Computing > Edge Computing Configuration.
In the section Edge Computing Operation Settings, select No from the drop-down list for Enable Edge Computing.
Click Send Changes/Activate.
Go to the DASHBOARD to check that the state of the Edge Computing service report Not running.
Optionally, you can check the logs of Edge Computing.
Contact Us
Barracuda Campus
Barracuda Support