Enurgen-managed integration
Give Enurgen read-only access to your data sources, and Enurgen builds and runs the integration.
In this option, you give Enurgen read-only access to your data sources. Enurgen builds, deploys, and runs the integration in the DUET cloud. This is the most common option, and it needs the least work from your IT team.
What you provide
- Read-only credentials for each data source, such as an API key, a service account, or a database user. For what each platform needs, see Data sources.
- Network access to each source:
- For a cloud platform, nothing more: Enurgen connects over HTTPS.
- For a source on your own network, such as a historian, a site-to-site VPN. If your source allows only known addresses, Enurgen gives you the addresses to allow.
How often data refreshes
Enurgen typically reads new data every hour, and checks each night that the data stored in DUET matches your source. Your account manager can agree a different schedule with you, within what your source system supports.
Site-to-site VPN
To reach sources on your network, Enurgen uses an AWS Site-to-Site VPN: an IPsec connection with two tunnels for redundancy. Each customer gets its own connection, isolated from every other customer's.
What you provide
- The public IP address of your VPN device.
- The internal address ranges that Enurgen needs to reach. They must not overlap the ranges Enurgen uses, which your account manager shares with you.
- If you use dynamic routing, your BGP autonomous system number (ASN). Static routing is the default.
Enurgen gives you the two tunnel endpoint addresses, Enurgen's address range, and the tunnel settings. You agree a pre-shared key with Enurgen through a secure channel, never by email.