Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Drawio
baseUrlhttps://checksec.atlassian.net/wiki
diagramNameCanopyLogicalDesign
width712
pageId68492454
height637
revision23

Services and Ports

Canopy communicates over the following TCP ports:

  • Canopy application server:
    • Web Server (https 0.0.0.0:443): main web application login interface, network accessible (i.e. bound to the "public" IP address). The default installation 
    • Django Application Server (http 127.0.0.1:8000): internal app server, bound to localhost. The web server proxies requests to this service.

    • RabbitMQ server (epmd AMQP 127.0.0.1:43695672): backend message queue for running asynchronous jobs via celery

  • Canopy database server:
    • Default: PostgreSQL  (pgql 127.0.0.1:5432): standard PostgreSQL interface (unencrypted). Encrypted configuration can be set up based on the standard PostgreSQL guidelines. This may be desirable if running the DB server on a separate server.
    • Other: if Oracle is used, the Oracle tnsnames.ora file is used. Specific ports can be configured in the canopy.ini file for connecting to custom configurations.
  • Canopy report server:
    • Docserver (http 127.0.0.1:8181): this is a python servlet that runs the docx generation service.
    • PDF converter (http 127.0.0.1:9016)

...