What is CAS Manager?
CAS Manager is a Teradici management plane enabling users to configure, manage and monitor brokering of remote workstations. CAS Manager enables highly-scalable and cost-effective Cloud Access Software deployments by managing cloud compute costs by brokering PCoIP connections to remote Windows or Linux workstations.
CAS Manager is offered in 2 variants – as a Teradici managed Service, and as an installable instance deployed and managed by the users in their on-premises or cloud environments.
This document covers the installable instance variant of CAS Manager.
For information on CAS Manager as a Service, see CAS Manager as a Service.
Where Do I Begin?¶
CAS Manager is a collection of microservices, and each microservice operates from its own container. These container images are deployed on a local K3s cluster, on a virtual machine. This cluster is set up on the virtual machine as part of the installation.
Before you begin installing CAS Manager, it is important to understand what other components are required by the CAS Manager to enable end to end brokering:
- CAS Manager
- Hashicorp Vault
- Cloud Access Connector
- Teradici PCoIP Registration Key
- Teradici PCoIP Client
- Teradici PCoIP Agent
MongoDB is the local data store that hosts all CAS Manager information, configurations and settings.
Hashicorp Vault is the key vault where CAS Manager stores all the secrets.
Cloud Access Connector is an access hub that facilitates PCoIP connections to remote desktops and workstations by providing user authentication, entitlement and security gateway services. It is installed on a separate VM that resides in your environment. Based on your requirements, you may need more than a single Cloud Access Connector. Please ensure you have read all the installation guidelines and prerequisites in the Cloud Access Connector section.
Where Do I Install CAS Manager?¶
The following architectural diagrams depict where CAS Manager can be installed in multiple infrastructures – be it the Public Cloud, On-Premises or a Hybrid deployemnt.
Please pay close attention to the number of Cloud Access Connectors required based on your setup, and the ports you may need to configure to allow PCoIP traffic (pre-session and in-session). These ports are outlined in the Ports and Connections table.
Public Cloud Deployment
The following diagram illustrates a public cloud deployment with CAS Manager.
The following diagram illustrates a hybrid deployment where CAS Manager is deployed in the Public Cloud.
The following diagram illustrates a hybrid deployment where CAS Manager is deployed on-premises.
The following diagram illustrates an on-premises deployment with CAS Manager.
Ports and Connections¶
CAS Manager requires certain ports to be open to enable connections between the other components such as Cloud Access Connector, MongoDB, Vault etc. For detailed breakdown of the ports and connection descriptions for Cloud Access Connector, Firewall and Load Balancing Considerations.
The following table outlines the required ports and connections for CAS Manager:
|CAS Manager||Inbound||443/TCP||From administrative web browsers, HTTP request clients and Cloud Access Connector.||To enable access to CAS Manager.|
|CAS Manager||Outbound||443/TCP||To the public license server.||Validates the CAS registration code.|
|CAS Manager||Outbound||8200/TCP||To Vault.||Stores CAS Manager secrets.|
|CAS Manager||Outbound||27017/TCP||To MongoDB.||Stores CAS Manager data.|
|CAS Manager||Outbound||636/TCP||To Domain Controller.||Authenticates users to CAS Manager.|
|CAS Manager||Outbound||53/UDP||To DNS.||Domain name resolution.|
How Do I Install CAS Manager?¶
You need to setup and install a dedicated virtual machine which will host CAS Manager. For information on the system requirements for this virtual machine, as well as the necessary firewall configurations for enabling in-bound traffic, see System Requirements. Once you have the virtual machine created, and firewall configured, you can begin installing CAS Manager.
Cloud Access Connector Installation
Once you have installed CAS Manager using either of the modes below, you need to install the Cloud Access Connector. This should take roughly 1 hour to complete.
There are two modes of the CAS Manager application:
Installing for Testing¶
In Testing mode, an instance of MongoDB and Vault is deployed as part of the installation. Installation of these components is seamlessly built into the CAS Manager installer. It is the default mode of installation. Upgrading or re-installing CAS Manager in Testing mode will replace these services and overwrite your data. This mode does not scale beyond a single CAS Manager instance and does not support high availability. For more information on this mode, see Installing for Testing.
Testing Mode Deployments
The Testing mode for CAS Manager is only recommended for testing purposes as of now. It should take roughly 45 minutes to complete the installation in this mode, and a further 1 hour to install the Cloud Access Connector, as mentioned above.
Installing for Production¶
Production installations of CAS Manager requires you to prepare and install your own instances of MongoDB and a Vault server on a different virtual machine, by following the guidelines in the installation section. This enables you to upgrade or re-install CAS Manager without losing data, and makes a high-availability service available. For more information on this mode, see Installing for Production.
Production Mode Deployments
This mode is recommended if you are planning on using CAS Manager in a large scale infrastructure. It should take roughly 2 hours to complete the installation in this mode, and a further 1 hour to install the Cloud Access Connector, as mentioned above.