SENTRA VIEW
Datasheet for fleet command above every SENTRA GUARD (version 1.25).
Version: 1.25 · Layer: Govern · Type: fleet command centre
SENTRA VIEW is the cockpit above every SENTRA GUARD: orchestrators, nodes and customers at once, with fleet traffic, alarms, tickets, central billing, the fleet price book, access across the fleet, licensing and software updates.
Key capabilities#
| Area | Capabilities |
|---|---|
| Fleet cockpit | Every orchestrator live; constellation of GUARDs; interactive hierarchy map VIEW → GUARDs → nodes → ATS / NTS with hover and click details |
| Orchestrators | Deploy, link and manage GUARDs; health, versions and traffic; jump in to a GUARD's console with a single-use pass, capped at a maximum role per GUARD |
| Customers, services, nodes | Every customer, firewall and node on every GUARD — and create or change them on any GUARD (customers, firewalls, moves, nodes); changes for an offline GUARD wait and run when it reconnects; conflicts are refused, never overwritten |
| Tickets | Customer faults and alarms with SLA, assignment, internal notes and replies shown in the customer portal (ticketing lives only in VIEW) |
| Billing | Central billing across all orchestrators: monthly runs, invoices, payments, voids, revenue and receivables |
| Plans & pricing | One fleet price book (plans, prices, currency) pushed to every GUARD, with per-GUARD status (in step, waiting, differs) |
| Access across the fleet | Users, roles, two-factor and password policy on every GUARD and down to each ATS / NTS box |
| Licensing | VIEW is a signing authority certified by the SENTRA Licensing Authority; licenses GUARDs and boxes automatically from the deployment plan, works disconnected, syncs its ledger; exceptions and stand-alone installs by Installation ID |
| Reports | Print, PDF or CSV |
| Team & access | VIEW's own staff, with fully customisable roles (only the Super Admin changes roles) |
| Audit trail | Every action, tamper-evident |
| Logs | Requests and security events |
| Backup & restore | Encrypted copies of VIEW's database |
| Software updates | VIEW itself, its GUARDs and their nodes (ATS, NTS, agent) from the signed release server |
Built-in roles (all editable by the Super Admin)#
Super Admin (fixed), OMM Admin, NOC Engineer, Billing Officer, Account Manager, Licence Requester, Licence Approver, Security Auditor, Viewer — plus any custom role. Each grant can be fleet-wide or scoped to an orchestrator or a customer.
Deployment#
Installed on its own Linux server or VM with the VIEW installer, which also places the ATS and NTS code beside it so VIEW can hand releases to its GUARDs.
Requirements#
| Item | Requirement |
|---|---|
| Operating system | Linux with systemd; Debian/Ubuntu (apt) for the installer |
| Runtime | Python 3 with venv, git (installed by the installer) |
| Database | SQLite by default; PostgreSQL supported |
| CPU / RAM / disk | Sized per deployment — contact SENTRA |
| Network | Reachable by its GUARDs; outbound HTTPS to the release server and the Licensing Authority |
Ports and protocols#
| Port | Use |
|---|---|
| 8010 (TCP, HTTP) | Console, API and the GUARD link (configurable with --port) |
| 9443 (TCP, HTTPS) | Built-in HTTPS for the console, self-signed or your own certificate (--https-port) |
| 443 (outbound) | Release server and Licensing Authority |
GUARDs connect to VIEW; VIEW never needs to reach into a GUARD.
Licensing#
VIEW holds an authority certificate from the Licensing Authority listing the products, modules, limits and latest expiry it may grant. Keys it issues are chained (OTG2) and reported back.
Management and security#
Two-factor sign-in, customisable roles with per-orchestrator and per-customer scope, maker-checker licence approvals (licence requester / approver), tamper-evident audit trail, encrypted backups, and signed updates.