Install Banyan Connector

This section installs and configures the Banyan Connector in your environment.

  • Updated on Mar 12, 2024

Overview

The Banyan Connector is a dial-out connector that establishes a secure tunnel with the Banyan Global Edge Network. The Connector can be deployed in any location that has connectivity to your internal services. Each Banyan Connector only connects outbound and does not need any inbound open ports to operate correctly.

Note that when a Banyan Connector is used, traffic flows from entities on the internet to the Banyan Global Edge Network (where your organization’s managed Access Tiers reside), and then through the Banyan Connector to the internal service.

Network Configuration

The Connector requires some minimal network configuration.

  1. The Connector needs to be able to connect outbound to the internet; it does not need any inbound open ports to operate correctly.

  2. Ensure that the Connector server can make an outbound HTTPS connection via port 443 to the Command Center. The Connector does this to register itself and receive its configuration parameters, by making API calls to https://{ccname}.console.banyanops.com/api/v1/….

  3. Ensure that the Connector can make an outbound UDP connection to the Banyan Global Edge Network. The Connector will pick a port(s) in the range 40000 - 44000 to set up WireGuard tunnels with the Edge Network.

  4. Ensure your networking policies allow traffic to flow from the Connector server to backend machines running the applications and services you need to secure access to.

Connector Sizing

Banyan recommends starting with 1 vCPU and then monitoring the throughput. If, for example, a 10 Gig link needs to be saturated, then increase vCPUs by a power of 2 (e.g., 1 vCPU, 2 vCPU, 4 vCPU), monitoring the throughput with each additional vCPU.

To monitor vCPU utilization, admins can check AWS cloud monitoring or the Connector instance itself (using the top command).

Logs Locations for Troubleshooting

Platform Logs Location
N/A /var/log/banyan/connector.log
Docker docker logs
Tarball /var/log/banyan/connector.log

Sections


Can’t find what you’re looking for?

We’re happy to help. Contact our team.