Air-Gapped Deployments

Distr supports air-gapped deployments where strict security requirements demand physical or logical isolation from public networks. This deployment model is ideal for organizations in regulated industries, such as defense, finance, and critical infrastructure, where external connectivity or the use of agents is not permitted.

Distr offers two approaches to support these environments:

1. IP Whitelisting: For environments that can allow limited outbound connections.
2. Self-Managed Registry with Physical Transfers: For fully isolated environments, Distr supports a workflow where updates are packaged, encrypted, and physically transferred (e.g., via USB or secure media).

Solution Architecture

Implementation Steps

IP Whitelisting Approach

Note

This approach works for environments where limited external connectivity is permitted and the Distr’s IP addresses can be whitelisted for secure access.

1. Set Up Your Registry
2. Create Your Application
3. White-label the Customer portal
4. Onboard your first customer
5. Request IP Allowlist for Customer Access
6. Customer creates a Personal Access token
7. Customer can access and pull your private artifacts

Physical Transfer Approach

Note

This approach is ideal for completely isolated environments with no external network connectivity, using cryptographically verified physical transfers instead.

1. End-customer self hosts Distr in their internal environment
2. Vendors deliver media to customer environment to be deployed internally via Distr
3. Reach out to support@glasskube.com for more detailed information of how Distr can enable this end-customer use case