Deployment Topology
Deployment Topology
| Field | Value |
|---|---|
| Distribution | BSS — OpenSOF |
| Product | OpenSOF |
| Release | 0.15.1 |
| Deployment | opensof.bss.dev |
| Source | /srv/bss/releases/OpenSOF-v0.15.0-20app |
| Evidence | Release and readable host configuration |
| Source fingerprint | cda583b42f2a0d296b268ab5b174932a378c8be6fb52ffa1af14af896e990f6e |
| Status | Generated baseline — human review required |
Verification boundary: This page combines platform design guidance with static evidence from the release. It does not prove that every detected interface is enabled, reachable, secure, or operational in the deployed environment.
Observed services
| Service | Working directory | ExecStart | Evidence |
|---|---|---|---|
| opencybersec-agent.service | — |
/opt/opencybersec-agent/opencybersec_agent.py --config /etc/opencybersec-agent.json |
edge/opencybersec/systemd/opencybersec-agent.service |
| openlvc-ais-bridge.service | /opt/opensof/edge/openlvc |
/usr/bin/python3 /opt/opensof/edge/openlvc/ais_nmea_bridge.py --opensof ${OPENSOF_URL} --token [REDACTED] --bind 0.0.0.0 --port 10110 |
edge/openlvc/systemd/openlvc-ais-bridge.service |
| openlvc-dis-bridge.service | /opt/opensof/edge/openlvc |
/usr/bin/python3 /opt/opensof/edge/openlvc/dis_udp_bridge.py --opensof ${OPENSOF_URL} --token [REDACTED] --bind 0.0.0.0 --port 3000 |
edge/openlvc/systemd/openlvc-dis-bridge.service |
| openlvc-flightgear-bridge.service | /opt/opensof/edge/openlvc |
/usr/bin/python3 /opt/opensof/edge/openlvc/flightgear_bridge.py --opensof ${OPENSOF_URL} --token [REDACTED] --bind 0.0.0.0 --port 5505 |
edge/openlvc/systemd/openlvc-flightgear-bridge.service |
| openlvc-rti-gateway.service | /opt/opensof/edge/openlvc |
/usr/bin/python3 /opt/opensof/edge/openlvc/rti_openbus_gateway.py --opensof ${OPENSOF_URL} --token [REDACTED] --federation ${OPENLVC_FEDERATION} --federate ${OPENLVC_FEDERATE} --sidecar-command ${OPENLVC_RTI_SIDECAR_COMMAND} |
edge/openlvc/systemd/openlvc-rti-gateway.service |
| openpnt-phc2sys@.service | — |
/opt/openpnt/bin/openpnt-linuxptp run phc2sys --instance /etc/openpnt/linuxptp/instances/%i.json --bin-dir /opt/openpnt/linuxptp/bin |
edge/openpnt-linuxptp/systemd/openpnt-phc2sys@.service |
| openpnt-ptp4l@.service | — |
/opt/openpnt/bin/openpnt-linuxptp run ptp4l --instance /etc/openpnt/linuxptp/instances/%i.json --bin-dir /opt/openpnt/linuxptp/bin |
edge/openpnt-linuxptp/systemd/openpnt-ptp4l@.service |
| openpnt-ts2phc@.service | — |
/opt/openpnt/bin/openpnt-linuxptp run ts2phc --instance /etc/openpnt/linuxptp/instances/%i.json --bin-dir /opt/openpnt/linuxptp/bin |
edge/openpnt-linuxptp/systemd/openpnt-ts2phc@.service |
| openrf-agent.service | /opt/openrf-agent |
/usr/local/bin/openrf-agent --config /etc/openrf/openrf-agent.json |
openrf/agent/systemd/openrf-agent.service |
| openc5isr-bss-opensof.service | /srv/bss/instances/opensof/current |
/usr/local/bin/npm start |
/etc/systemd/system/openc5isr-bss-opensof.service |
Observed reverse-proxy topology
| Source | Server names | Locations | proxy_pass |
|---|---|---|---|
| /etc/nginx/sites-available/opensof.bss.dev | opensof.bss.dev opensof.bss.dev |
/ | http://127.0.0.1:3201/ |
Topology verification
- Confirm which directory or symlink is the authoritative current release.
- Confirm each public hostname terminates TLS and routes to the intended instance/port.
- Document shared backends separately from edition-specific application instances.
- Record network zones and firewall policy for public, management, data and sensor interfaces.
Maintainer Notes
Add human-reviewed deployment notes, corrections, decisions, screenshots, and links here. Content outside the generated block is preserved on future runs.