dfe-infra documentation

Start here to deploy, test and secure the DFE suite with dfe-infra. It covers the architecture, the deployment guides under deployment/, the validation cycles and the threat model.

Coming from Splunk or Elastic? DFE does several things differently on purpose. Read coming from Splunk, Elastic or a lakehouse first.

• The attended acceptance cycle
• dfe-infra architecture
• Auth testing -- where the identities come from
• Autoscaling: the two layers and the per-target fork
• Keeping shared facts current
• ClickHouse identity
• ClickHouse native JSON type
• Cloud cycles
• DFE cryptographic standard
• Cutting a stack version
• Release + deploy helpers
• Trusting the DFE certificate
• Deploying DFE with dfe-infra
• Design principles
• Edge exposure and authentication -- cloud specifics
• Edge exposure and authentication
• Readiness and failure evidence
• The ingest edge
• Release rounds
• The post-deploy source tests (acceptance --suite source)
• DFE stack components - render class map
• The DFE suite graph
• The validation cycle: create -> test e2e -> destroy
• DFE exposure model
• Use cases
• Verification tiers -- T0 / T1 / T2
• Why DFE