Ir al contenido
Tier0 DocsDocumentación

Security and Resilience

Disponible enCloudEnterprise

Esta página aún no está disponible en tu idioma.

Tier0 ensures data security through the following aspects:

  • Security: Controls who can access the platform, applications, and data.
  • Resilience: Covers service continuity and data recovery after failures.

Security Scope by Edition

Section titled “Security Scope by Edition”
Edition Security Coverage
Cloud Platform access control and authenticated access to MQTT and APIs.
Enterprise Platform and data access control, plus deployment availability, backup, and recovery for private deployments.
Edge (open source) Local data connection and modeling. Its built-in MQTT broker allows unauthenticated subscriptions.

See Choosing the Best Product for edition positioning.

Security

Section titled “Security”

Identity and Access Control

Section titled “Identity and Access Control”
Area Tier0 Mechanism Details
Platform access
  • Cloud controls access through workspace membership.
  • Enterprise controls access through user accounts.
 User Management
Agent access Agents authenticate with an API key and use the Tier0 CLI to access and operate the platform. CLI authentication
Project and application access Tier0 uses RBAC to control access to applications. Access control

Data Access Control

Section titled “Data Access Control”
Access Tier0 Mechanism Details
MQTT
  • Clients authenticate with credentials generated by Tier0.
  • TLS and secure WebSocket encrypt data in transit.
 MQTT credentials and connections
REST API Accessing data requires a key generated by Tier0. API Reference

Resilience

Section titled “Resilience”

Deployment Availability

Section titled “Deployment Availability”

Enterprise currently provides two deployment plans for center nodes:

Plan Availability Boundary Details
Standard deployment
  • Provides database primary/standby failover.
  • The Enterprise application and EMQX remain single points of failure.
 Standard Deployment Plan
High availability deployment
  • Adds active/standby Enterprise nodes and defined failover behavior for the database, cache, object storage, and managed runtime files.
  • Does not promise zero interruption or zero data loss.
 High Availability Deployment Plan

Backup and Recovery

Section titled “Backup and Recovery”

Enterprise provides database backup and recovery. After recovery, check deployment status, run basic functionality checks, and confirm that users can sign in to the platform.