The Security Implications of Providing a Support Bundle to Delphix Support (KBA1664)
This document is for internal use only.
Applicable Delphix Versions
|
Major Release |
Sub Releases |
| 5.2 | 5.2.2.0 |
|
5.1 |
5.1.0.0, 5.1.1.0, 5.1.2.0, 5.1.3.0, 5.1.4.0, 5.1.5.0, 5.1.5.1, 5.1.6.0, 5.1.7.0, 5.1.8.0, 5.1.8.1, 5.1.9.0 |
|
5.0 |
5.0.1.0, 5.0.1.1, 5.0.2.0, 5.0.2.1, 5.0.2.2, 5.0.2.3, 5.0.3.0, 5.0.3.1, 5.0.4.0, 5.0.4.1 ,5.0.5.0, 5.0.5.1, 5.0.5.2, 5.0.5.3, 5.0.5.4 |
Description
The following document aims to provide information about which data is collected when a customer generates a support bundle. While security administrators are the target audience this document may be of value to anyone in a customer organisation using or contemplating implementing the Delphix Engine in their environment. Armed with this information customers and their security teams can make an informed decision about whether sending a support bundle to Delphix is acceptable, meeting corporate or even national security requirements on sharing information.
Support bundle data enables Delphix support staff and engineering to understand the configuration of a Delphix Engine and associated source and target hosts. It is important to clarify from the outset that there is no source or target host database-related user data contained within a support bundle. Further, no password information is included within a support bundle.
Generating a support bundle, downloading the file locally and inspecting its content is feasible.
Overview of Data Collection
The data collected when a support bundle is generated covers several areas.
Delphix Engine Operating system state and configuration
-
- ZFS
- Networking
- Kernel
- System configuration
- Process and service information
Delphix Engine data Logging
-
- Application logging
- Operating System logs
Delphix Engine internal Postgres database
-
- Database content
- Database logs and configuration
Privilege Requirements for Support Bundle Generation
To be able to generate a support bundle the user must have delphix_admin or sysadmin privileges.
User: delphix_admin
When logged in as delphix_admin it is possible to add a new user with "Delphix Admin" privileges.
User: sysadmin
When logged in as sysadmin, it is possible to add a new sysadmin user.
Any new user with sysadmin privileges will by default have the authority to generate a support bundle.
Support Bundle Transmission Protocol
Support bundle generation provides the option to upload directly to Delphix using the browser interface. This is only applicable in cases where the Delphix Engine is able to reach the internet. Direct uploads are transferred to Delphix using HTTPS. Alternatively, a support bundle may be uploaded to a local (intermediary) host and the file can then be uploaded from a second or third host over HTTPS to https://upload.delphix.com
For full instructions please see How to Create and Upload Support Logs.
