![]() ![]() When the agent tries to download updates, if the initial relay doesn't respond, then the agent randomly selects another member relay from the group to update from. Relay groups provide redundancy and distribute load for updates. To improve performance, optimize bandwidth, and have redundancy, you can create more relay groups and arrange them in hierarchies. Continue with Ensure fast, reliable updates with relay groups if you want to arrange relays in multiple relay groups.Įnsure fast, reliable updates with relay groupsīy default, agents retrieve updates from the default relay group. When you enable a relay, initially it is assigned to the default relay group. If relays must connect through a proxy, see Configuring relay groups to use a proxy server. If Windows Firewall or iptables is enabled on the computer, add a firewall rule that allows incoming connections to the relay's listening port number.To view the number of updates that the relay is ready to distribute, click the Preview icon to display the preview pane. The computer's icon will change from an ordinary computer to a computer with a relay. Verify that the computer is running a 64-bit version of the agent software. Go to Administration > Updates > Software > Local and verify that the corresponding package has been imported.Ĥ. Verify that the agent is not already a relay.ģ. If the Enable Relay button is not visible:Ģ. Double-click a computer that meets Deep Security Relay system requirements.However, you can delete and re-install the agent. Enable a relayĬurrently, once you have enabled relay functionality for an agent, you can't disable it from the Deep Security Manager. What if you add more relays, or want faster updates? To provide a 10 MB update to 20,000 agents in 30 minutes, 4 relays are required to provide a 10 MB update to 20,000 agents in 1-2 hours, only 2 relays are required. By adding 1 relay on that subnet, the required bandwidth would be reduced to 100 MB/hour maximum, and 1 - 10 MB/hour usually. ![]() If there were no relay on that subnet, the maximum update bandwidth would be about 5 GB/hour, but most updates would need 50 - 500 MB/hour. The size of the download for initial agent activation is usually between 50 to 100 MB updates after that are usually less, between 1 and 10 MB.įor example, 50 agents might need updates in 1 hour. The recommended number of relays depends on how many agents will need updates with an period of time. Sizing for Deep Security Relays Number of agents Both can decrease performance instead of improving it. If there are too many layers of relay groups, total latency can add more time than the relays' bandwidth optimization saves. Also, a primary relay must transmit the update to the next relay and so on before the other agents can finally download an update from their relay each hop adds some latency. A relay requires more system resources than an ordinary agent. To alleviate bottlenecks, put a relay inside each bottlenecked network segment.ĭon't convert all of your agents to be relays. Routers, firewalls, or proxies with high system resource usage between agents and the update source can also be performance bottlenecks. Number of network bottlenecks or maximum bandwidthĪ bottleneck occurs when all agents cannot quickly download updates through the same connection, such as a low bandwidth WAN connection between the agents' local network segment and a remote Deep Security Manager or Trend Micro update server. Number of protected computers ( deployment scale).Trend Micro recommends that agents download updates from a relay group in the same geographic region, preferably the same local network. How many relays should you have? Number of relays should vary by: Trend Micro recommends at least 2 relays for redundancy. You don't use Deep Security as a Service.The computer meets Deep Security Relay system requirements.Ensure fast, reliable updates with relay groups.For sizing information, see Sizing for Deep Security RelaysĬurrently, once you have enabled the relay feature, you can't use Deep Security Manager to disable it. For more information, see How do relays work?.Įvery Deep Security deployment needs at least one relay group so that your agents and appliances can download security updates and software, but to optimize performance, usually you should have more relays. Relays update your agents more quickly, reduce manager load, and save Internet connection or WAN bandwidth. Deep Security Relays are agents where you have enabled the relay feature, which is available in Deep Security Agent 9.5 or newer for Windows and Linux. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |