Deploying BOSH Add-Ons

This documentation explains how to deploy optional BOSH Add-ons as a part of installing the Pivotal Cloud Foundry (PCF) platform.

Overview

BOSH Add-ons are optional platform extensions that you deploy with BOSH rather than installing them as Ops Manager tiles.

Pivotal recommends installing BOSH Add-ons immediately after deploying BOSH and Ops Manager, before you use Ops Manager to add tiles to the platform.

BOSH Add-ons from Pivotal include IPsec, ClamAV, and File Integrity Monitoring, which enhance PCF platform security and security logging.

Open-source BOSH Add-ons include a syslog forwarder, a custom SSH login banner, and a tool for adding SSH users.

See Deploying Software with BOSH for an overview of the BOSH deployment process.

Contents

  • IPSec Add-on for PCF secures data transmissions inside PCF following IPSec standards.

  • ClamAV Add-on for PCF logs PCF internal antivirus protection activity, to demonstrate to auditors that it complies with industry standards and government regulations.

  • File Integrity Monitoring Add-on for PCF (FIM) logs PCF internal file integrity monitoring activity, to demonstrate to auditors that it complies with industry standards and government regulations.

Create a pull request or raise an issue on the source for this page in GitHub