module, is responsible for communicating with the BIE Cloud Management Suite. It has MQTT and HTTPS channels. MQTT enforces two-way authentication for SSL/TLS certificates. HTTPS enforces one-way authentication ca: [MUST] The CA path for client to connect with cloud management suit. key: [MUST] The private key path for client to connect with cloud management suit. cert: [MUST] The public key path `ssl` or `wss` is enabled, it must be configured. ca: Server CA certificate path key: Server private key path cert: Server public key path principals: ACL configuration. If not configured, client

module, is responsible for communicating with the BIE Cloud Management Suite. It has MQTT and HTTPS channels. MQTT enforces two-way authentication for SSL/TLS cer- tificates. HTTPS enforces one-way authentication device. ca: [MUST] The CA path for client to connect with cloud management suit. key: [MUST] The private key path for client to connect with cloud management suit. cert: [MUST] The public key path for client `ssl` or `wss` is ˓→enabled, it must be configured. ca: Server CA certificate path key: Server private key path cert: Server public key path principals: ACL configuration. If not configured, client cannot

module, is responsible for communicating with the BIE Cloud Management Suite. It has MQTT and HTTPS channels. MQTT enforces two-way authentication for SSL/TLS cer- tificates. HTTPS enforces one-way authentication device. ca: [MUST] The CA path for client to connect with cloud management suit. key: [MUST] The private key path for client to connect with cloud management suit. cert: [MUST] The public key path for client baetyl-agent Configuration 37 BAETYL Documentation (continued from previous page) key: Server private key path cert: Server public key path principals: ACL configuration. If not configured, client cannot

module, is responsible for communicating with the BIE Cloud Management Suite. It has MQTT and HTTPS channels. MQTT enforces two-way authentication for SSL/TLS certificates. HTTPS enforces one-way authentication ca: [MUST] The CA path for client to connect with cloud management suit. key: [MUST] The private key path for client to connect with cloud management suit. cert: [MUST] The public key path `ssl` or `wss` is enabled, it must be configured. ca: Server CA certificate path key: Server private key path cert: Server public key path principals: ACL configuration. If not configured, client

HiLens Campus surveillance Huawei Hilens Edge network characteristics • Edge Nodes running at private network • Connect to Cloud behind NAT gateway • Mightn’t have direct connection between Edges Edge/Cloud Cluster Management • There is cloud cluster, edge cluster, i.e. multiple nodes running in private network • Edge nodes, Edge cluster and cloud cluster needs acting as a single cluster Edge Node

HiLens Campus surveillance Huawei Hilens Edge network characteristics • Edge Nodes running at private network • Connect to Cloud behind NAT gateway • Mightn’t have direct connection between Edges Edge/Cloud Cluster Management • There is cloud cluster, edge cluster, i.e. multiple nodes running in private network • Edge nodes, Edge cluster and cloud cluster needs acting as a single cluster Edge Node

Application management • Inter-service communication • … • Edge special characters • Edge node running in private network • connect to Cloud behind NAT • Edge node’s connect to Cloud through Internet • Low bandwidth/High