Anatomy of Abuse Shield Pods

wforce Pods

Both the wforce and syncdb deployments consist of Pods of this type; the syncdb deployment is simply a special case of a wforce deployment.

A wforce pod consists of the following containers:

  • Init Containers
    • wforce-init - A container that runs a templating engine on the configuration file for wforce
  • Containers
    • wforce - The wforce image, that answers REST API queries and replicates statsdb messages etc.
    • wforce-agent - An agent that monitors the wforce-replication service endpoints, and loads any changes into wforce using the REST API.

This is shown in the following diagram:

replfwd Pods

The replfwd pod is very similar to the wforce pod, and consists of the following containers:

  • Init Containers
    • wforce-init - A container that runs a templating engine on the configuration file for replfwd
  • Containers
    • replfwd - The replfwd image, that forwards statsdb and block/allow list messages to/from other clusters.
    • wforce-agent - An agent that monitors the wforce-replication service endpoints and loads any changes into replfwd using the REST API

This is shown in the following diagram: