Replication security

Hystax replication agents communicate with the Hystax Acura Controller using SSL encrypted network requests. Also, each instance of replication agent (e.g. VMware replication agent VM or Windows/Linux replication agent service) has a certificate of the corresponding Hystax Acura Controller, which allows Agent ensure that it connects exactly to the same Controller as it should.

All replication can be done in an isolated environment, meaning that Hystax Acura deployment doesn't make requests to any of the services outside of the secured zone, including any of Hystax-hosted services.

License usage reporting

In case of self-hosted deployment, Hystax Acura needs to send license consumption reports. For transparency, these reports are sent as plain text emails through customer-managed SMTP server.

Example of license consumption report email:

From nobody Tue May 22 18:11:40 2022
Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="pgp-sha1"; boundary="===============3804547701375757954=="
MIME-Version: 1.0
Subject: Report [<deployment_name>] DistTypes.<DR/Migration> report for 2022-05-22-2022-07-22
From: <<<customer_managed_email>>>
To: [email protected]

--===============3804547701375757954==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

MDAwZ<<<license_key>>>ou8K
MDAwZ<<<deployment_id>>>SCg
new replications: 1
customer_id,device_id,partner_id,time,cloud_type,storage_type
53108da1-6bbf-471c-bbe6-0af70462402e,ee3429ae-df11-45af-8c92-9c5ca3d4bdd5,847ea322-6b05-4410-aaa8-873b108dfe0f,1669139100,openstack_cnr,cloud_agent

--===============3804547701375757954==
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAABAgAGBQJjfRDcAAoJEK55p7hg3RmHDAYIANP15QND3X0rMniH7GefYQ1w
S9L6tP1vJ2IUtCVtAUE8ICyGJErzE9Tsl4gW+IlTTvUwYACla+iVYXi+GxhSAXMl
Fo18v8OxKT8TEWF9N5+fIJi7fOVNY2PgqtbT/mPEEfsuCFeI1AiwpBXNKHByNK2x
+bdHhn5fYxMvH0l/SrVke8LfsIf3r2ujVaCXW7DgKXVAh3M36pPO5TXMfK0p8bwU
NHoAn8V8ROGrmgvI3/6ms8fIWgWHFMVe3rIW1wTG/eWNtcDtbjv4hrX9vyPEz4KM
dsIwPILMwznIujLNBIww3808tpYA8a5AKspexgRIOWH6T+lumE/74VBh9d0kmR4=
=Q3qo
-----END PGP SIGNATURE-----

--===============3804547701375757954==--