# dfe-infra

> Every page in the dfe-infra section.

- [dfe-infra architecture](/v/2.2.1/dfe-infra/architecture.md)
- [Autoscaling: the two layers and the per-target fork](/v/2.2.1/dfe-infra/AUTOSCALING.md)
- [ClickHouse identity](/v/2.2.1/dfe-infra/CLICKHOUSE-IDENTITY.md)
- [ClickHouse native JSON type](/v/2.2.1/dfe-infra/CLICKHOUSE-JSON-TYPE.md)
- [DFE cryptographic standard](/v/2.2.1/dfe-infra/CNSA-STANDARD.md)
- [Trusting the DFE certificate](/v/2.2.1/dfe-infra/DEPLOY-TLS-TRUST.md)
- [Edge exposure and authentication -- cloud specifics](/v/2.2.1/dfe-infra/EDGE-AUTH-cloud.md)
- [Edge exposure and authentication](/v/2.2.1/dfe-infra/EDGE-AUTH.md)
- [The ingest edge](/v/2.2.1/dfe-infra/INGEST-EDGE.md)
- [DFE exposure model](/v/2.2.1/dfe-infra/THREAT-MODEL.md)
- [Deploying DFE with dfe-infra](/v/2.2.1/dfe-infra/deployment.md)
  - [DFE on AWS -- Operations](/v/2.2.1/dfe-infra/deployment/aws-operations.md)
  - [DFE on AWS -- Teardown](/v/2.2.1/dfe-infra/deployment/aws-teardown.md)
  - [DFE on AWS](/v/2.2.1/dfe-infra/deployment/aws.md)
  - [ClickHouse SSD tiering](/v/2.2.1/dfe-infra/deployment/clickhouse-tiering.md)
  - [ClickHouse: targets, operators, and the swap seam](/v/2.2.1/dfe-infra/deployment/clickhouse.md)
  - [Default composition: which apps a profile deploys](/v/2.2.1/dfe-infra/deployment/composition.md)
  - [Edge-fleet VPN](/v/2.2.1/dfe-infra/deployment/edge-vpn.md)
  - [The edge module](/v/2.2.1/dfe-infra/deployment/edge.md)
  - [Edge OIDC through the gateway](/v/2.2.1/dfe-infra/deployment/gateway-oidc.md)
  - [Managed backends on the deployment's own cloud](/v/2.2.1/dfe-infra/deployment/managed-backends.md)
  - [Build, test and clean up on an on-prem cluster](/v/2.2.1/dfe-infra/deployment/on-prem.md)
  - [Deployment portability matrix](/v/2.2.1/dfe-infra/deployment/portability-matrix.md)
  - [RKE2 - a primer (the DFE Kubernetes distribution)](/v/2.2.1/dfe-infra/deployment/rke2.md)
  - [Storage: the deploy-time matrix](/v/2.2.1/dfe-infra/deployment/storage.md)
  - [Troubleshooting toolbox](/v/2.2.1/dfe-infra/deployment/toolbox.md)
  - [Rollback runbook](/v/2.2.1/dfe-infra/deployment/upgrade-rollback.md)
  - [Upgrades](/v/2.2.1/dfe-infra/deployment/upgrades.md)
  - [The deployment wizard -- `dfe-ops init`](/v/2.2.1/dfe-infra/deployment/wizard.md)
  - [DFE Kafka defaults and per-platform config guides](/v/2.2.1/dfe-infra/deployment/kafka.md)
    - [Kafka broker autoscaling](/v/2.2.1/dfe-infra/deployment/kafka/autoscaling.md)
    - [DFE on AWS MSK -- Operations](/v/2.2.1/dfe-infra/deployment/kafka/aws-msk-operations.md)
    - [DFE on AWS MSK](/v/2.2.1/dfe-infra/deployment/kafka/aws-msk.md)
    - [DFE on Confluent Cloud](/v/2.2.1/dfe-infra/deployment/kafka/confluent-cloud.md)
    - [DFE on Redpanda Cloud](/v/2.2.1/dfe-infra/deployment/kafka/redpanda-cloud.md)
    - [Redpanda as a DFE Kafka provider -- limitations and when to use it](/v/2.2.1/dfe-infra/deployment/kafka/redpanda-limitations.md)