Sysdig Documentation

Architecture

Review the diagram and component descriptions. When installing on-premises, you can decide where to deploy various components.

374046785.png

Agent

The agent lives on the hosts being monitored and collects the appropriate metrics and events.

Backend Components (stateless)

The backend components connect with each other internally on port 9000.

Component

Description

Ports

API Servers

Provide a web and API interface to the Sysdig application.

You can write scripts to interact directly with the API.

9000

Collectors

Agents connect here to deliver data to the Sysdig Monitor backend.

9000

Workers

Process data aggregations and alerts.

9000

Cache Layer (stateful)

Component

Description

Ports

Redis

An open-source (BSD licensed) data structure store used as an intra-service cache

6639

Datastores (stateful)

Component

Description

Ports

MySQL

Stores user credentials and environmental data

3306

Elasticsearch

Stores all events and metadata

9200

Cassandra

Stores all metrics

9042

Load Balancer Services

Component

Description

Ports

lb-api service

Load balancer for API server

(may be named differently in different orchestrators)

80, 443

lb-collector service

Load balancer for collector

(may be named differently in different orchestrators)

6443, 6666