While upgrading there are some dependency, ONES-3.1.0 have a enhanced DB as compare to old releases.
If user wants to a upgrade from old version to ONES-3.1.0, user needs to contact AVIZ support.
By default, the installer does not provide any license, user needs to contact AVIZ support Team.
ONESv3.1.0 support SSL certificate integration
User can choose YES if the User wants to integrate their own SSL certificate
Installing Open Networking Enterprise Suite (ONES)
..................................................
ONES Containers not found. Initiating a fresh installation...
Installing prerequisites for ONES application
pip is installed, so skipping it
containerd package is installed, so skipping it
docker packages are installed, so skipping it
docker-compose is installed, so skipping it
ssh package is installed, so skipping it
ONES is getting installed for the first time, Please follow the prompts carefully and select the appropriate options as instructed
....................
Installing ONES application...
Do you want to install domain SSL certificate(if not, self-signed certificate will be used)? [y/n]: y
Enter the path to the private key file: /home/aviz/server.pem
Enter the path to the certificate file: /home/aviz/server.crt.pem
Note* Replace the Private key & certificate path to correct location
Choose No, if the user wants to use a self-signed certificate that is integrated into ONES package
Installing Open Networking Enterprise Suite (ONES)
..................................................
ONES Containers not found. Initiating a fresh installation...
Installing prerequisites for ONES application
pip is installed, so skipping it
containerd package is installed, so skipping it
docker packages are installed, so skipping it
docker-compose is installed, so skipping it
ssh package is installed, so skipping it
ONES is getting installed for the first time, Please follow the prompts carefully and select the appropriate options as instructed
....................
Installing ONES application...
Do you want to install domain SSL certificate(if not, self-signed certificate will be used)? [y/n]: n
Using self signed certificates...
Enable or disable the ONE DL feature
User can choose YES if the User wants to enable ONES DataLake feature.
Do you want to enable ONE-DL feature? [y/n]: y
Since ONE-DL configuration has been chosen, please provide the information below...
Enter EC2 ONE-DL Backend Public DNS Endpoint: <Path>
User can choose No if need not to enable ONES DataLake feature
Do you want to enable ONE-DL feature? [y/n]: n
The installation allows a user to enable DB backup
Users can choose the local or remote location to backup the database
By default, the application creates a database backup every 86400 seconds(1 day), but the user can modify it as per the requirement
Local and Remote Backup
By-default application creates 1 backup for local and for remote,
It has a range of 1 to 3 and once it will add one more it will remove the first copy of the database,
User can modify the number of backup files at the time of installation
By-default ONES create ./backup directory to maintain local database
Local backup:
Do you want to enable DB backup feature? [y/n]: y
Where do you want to store the backups? [local/remote]: local
Enter the backup directory: ./backups
Enter the number of backups (between 1 and 3) to retain (Older backups will be deleted): 3
Enter the backup interval in seconds (3600 seconds or higher): 3600
Remote backup:
Do you want to enable DB backup feature? [y/n]: y
Where do you want to store the backups? [local/remote]: remote #remote keyword trigger remote database on server
Please make sure the remote server is reachable via SSH
Enter the remote machine IP: 10.0.0.1
Enter the remote machine username: admin
Enter the remote machine password:
Enter the backup directory: ~/backups #Enter the remote server directory in which user wants to take backup. Ensure this backup directory has full permission
Backup is being done in 10.0.0.1 at ~/backups
Enter the number of backups (between 1 and 100) to retain (Older backups will be deleted): 5 #Enter the number of backup user wants to create
Enter the backup interval in seconds (3600 seconds or higher): 86400 #Enter the value in seconds to take a backup
ONESv3.1.0 support certificate-based authentication between ONES App and devices for GNMI and Auto-discovery
For agent auto-discovery agent will act as a client and the collector as a server.
For normal gnmi communication, the agent will act as a server and the collector as a client. Need certificates based on this.
No:
Do you want to enable certificate based authentication between ONES controller and devices? [y/n]: n
Yes:
Do you want to enable certificate based authentication between ONES controller and devices? [y/n]: y
Enter the path to the ca-cert.pem file: ca-cert.pem
Enter the path to the server-cert.pem file: server-cert.pem
Enter the path to the server-key.pem file: server-key.pem
Enter the path to the client-cert.pem file: client-cert.pem
Enter the path to the client-key.pem file: client-key.pem
Proceeding with certificates for Agent Auto Registration
Enter the path to the ca-cert-reg.pem file: ca-cert-reg.pem
Enter the path to the server-cert.pem file: server-cert.pem
Enter the path to the server-key.pem file: server-key.pem
Enter the path to the client-cert.pem file: client-cert.pem
Enter the path to the client-key.pem file: client-key.pem
The user needs to provide the certificate path and replace the key name with the path of the certificate to be used here
ONES Application support IP-based Access & FQDN Access
Enter the ONES App URL: https:// #Replace the input with IP or FQDN
IP based
Enter the ONES App URL for Rule-Engine Alert [https://<host-ip or domain>]: https://192.168.1.1
FQDN based
Enter the ONES App URL for Rule-Engine Alert [https://<host-ip or domain>]: https://ones.aviznetworks.com
ONESv3.1.0 support password-based(MD5) authentication between ONES App and devices for GNMI and Auto-discovery
User can choose yes if need password based authentication
Do you want to enable agent authentication ? [y/n]: y
Enter the ones-agent username: admin
Enter the ones-agent password: YourPaSsWoRd
User can choose no if there no requirement of authentication
Do you want to enable agent authentication ? [y/n]: n
Password Guidline:
Atleast 8 character
Atleast one Uppercase
Atleast one Smaller case ,
Atleast one numeric
Atleast one Special character
allowed special characters are @#$^*
Users cannot simultaneously select both certificate-based authentication and password-based authentication between the agent and the ONES application. They must choose one authentication method at a time for securing communication between the agent and the ONES app if required.
ONESv3.1.0 support AI Assistance Feature:
User can choose yes if need to enable
Do you want to enable AI Assistant feature? [y/n]: y
User can choose no if user do not want to add this feature
Do you want to enable AI Assistant feature? [y/n]: n
Installation begins
Installing Open Networking Enterprise Suite (ONES)
..................................................
ONES Containers not found. Initiating a fresh installation...
Installing prerequisites for ONES application
pip is installed, so skipping it
containerd package is installed, so skipping it
docker packages are installed, so skipping it
docker-compose is installed, so skipping it
ssh package is installed, so skipping it
ONES is getting installed for the first time, Please follow the prompts carefully and select the appropriate options as instructed
....................
Installing ONES application...
Do you want to install domain SSL certificate(if not, self-signed certificate will be used)? [y/n]: y
Enter the path to the private key file: /home/aviz/ONES-3.0_26thSep_Respin/ones-1727376396-onprem/certs/server.pem
Enter the path to the certificate file: /home/aviz/ONES-3.0_26thSep_Respin/ones-1727376396-onprem/certs/server.crt.pem
Do you want to enable ONE-DL feature? [y/n]: n
Do you want to enable DB backup feature? [y/n]: n
Do you want to enable certificate based authentication between ONES controller and devices? [y/n]: n
Enter the ONES App URL for Rule-Engine Alert [https://<host-ip or domain>]: https://10.20.0.93
Do you want to enable agent authentication ? [y/n]: n
Do you want to enable AI Assistant feature? [y/n]: n
AI Assistant feature not enabled. Setting to false.
Setting up the environment and loading essential dockers...
Loading images:
- avizdock/ones-collector:v3.1.0... Done
- avizdock/timescaledb:pg16... Done
- avizdock/ones-ui:v3.1.0... Done
- avizdock/pty-server:v3.1.0... Done
- avizdock/ones-gateway:v3.1.0... Done
- avizdock/ones-fm:v3.1.0... Done
- avizdock/postgres:14... Done
- avizdock/docker:v3.1.0... Done
- avizdock/ones-db-backup:v3.1.0... Done
- avizdock/zookeeper:v3.1.0... Done
- avizdock/kafka:v3.1.0... Done
- avizdock/schemaregistry:v3.1.0... Done
- avizdock/kafka-connect:v3.1.0... Done
- avizdock/ksqldb-server:v3.1.0... Done
- avizdock/ones-stream-processor:v3.1.0... Done
- avizdock/apiserver:v3.1.0... Done
- avizdock/ones-rule-service:v3.1.0... Done
- avizdock/ai-assistant:v3.1.0_beta... Done
Creating volumes:
- ones-collector-db-data... Created.
- ones-ui-data... Created.
- ones-fm-db-data... Created.
- ones-fm-data... Created.
- ones-rule-db-data... Created.
....
- Total images loaded: 18
- Total failed loads: 0
- Volumes created: 5
- ones-network... Created.
Cleaning up containers...
Cleaning containers: [100%] [#############################.]
All containers cleaned up successfully.
Bringing up ONES app containers
Bringing up ONES-collector-db container in no recreate mode and ONES-fm-db
The Docker Engine you're using is running in swarm mode.
Compose does not use swarm mode to deploy services to multiple nodes in a swarm. All containers will be scheduled on the current node.
To deploy your application across the swarm, use `docker stack deploy`.
Creating ones-collector-db ...
Creating ones-collector-db ... done
The Docker Engine you're using is running in swarm mode.
Compose does not use swarm mode to deploy services to multiple nodes in a swarm. All containers will be scheduled on the current node.
To deploy your application across the swarm, use `docker stack deploy`.
Creating ones-fm-db ...
Creating ones-rule-service-db ...
Creating ones-fm-db ... done
Creating ones-rule-service-db ... done
The Docker Engine you're using is running in swarm mode.
Compose does not use swarm mode to deploy services to multiple nodes in a swarm. All containers will be scheduled on the current node.
To deploy your application across the swarm, use `docker stack deploy`.
Creating zookeeper ...
Creating zookeeper ... done
Name Command State Ports
----------------------------------------------------------------------------------------------------------------------------
ones-collector-db /docker-entrypoint.sh postgres Up 0.0.0.0:5432->5432/tcp,:::5432->5432/tcp, 8008/tcp, 8081/tcp
ones-fm-db docker-entrypoint.sh postgres Up 0.0.0.0:2345->5432/tcp,:::2345->5432/tcp
ones-rule-service-db docker-entrypoint.sh postgres Up 0.0.0.0:2456->5432/tcp,:::2456->5432/tcp
zookeeper /etc/confluent/docker/run Up 0.0.0.0:2181->2181/tcp,:::2181->2181/tcp, 2888/tcp, 3888/tcp
please wait for collector-db, rule-service-db and fm-db to initialize
........................................................................................................................The Docker Engine you're using is running in swarm mode.
Compose does not use swarm mode to deploy services to multiple nodes in a swarm. All containers will be scheduled on the current node.
To deploy your application across the swarm, use `docker stack deploy`.
zookeeper is up-to-date
Creating broker ...
Creating broker ... done
ones-collector-db
................................................................................................................................................................................................................................................The Docker Engine you're using is running in swarm mode.
Compose does not use swarm mode to deploy services to multiple nodes in a swarm. All containers will be scheduled on the current node.
To deploy your application across the swarm, use `docker stack deploy`.
zookeeper is up-to-date
broker is up-to-date
Creating ksqldb-server ...
Creating schema-registry ...
Creating ksqldb-server ... done
Creating schema-registry ... done
Creating kafka-connect ...
Creating kafka-connect ... done
............................................................
The Docker Engine you're using is running in swarm mode.
Compose does not use swarm mode to deploy services to multiple nodes in a swarm. All containers will be scheduled on the current node.
To deploy your application across the swarm, use `docker stack deploy`.
zookeeper is up-to-date
broker is up-to-date
Creating ones-gateway ...
Creating ones-gateway ... done
Creating ones-collector ...
Creating ones-collector ... done
........................................................................................................................The Docker Engine you're using is running in swarm mode.
Compose does not use swarm mode to deploy services to multiple nodes in a swarm. All containers will be scheduled on the current node.
To deploy your application across the swarm, use `docker stack deploy`.
ones-rule-service-db is up-to-date
ones-collector-db is up-to-date
zookeeper is up-to-date
Creating ones-pty-server ...
Creating ones-rule-service ...
Creating api-server ...
ones-fm-db is up-to-date
Creating docker ...
Creating ones-ui ...
ones-gateway is up-to-date
broker is up-to-date
ones-collector is up-to-date
schema-registry is up-to-date
ksqldb-server is up-to-date
kafka-connect is up-to-date
Creating ones-fm ...
Creating stream-processor ...
Creating ones-rule-service ... done
Creating stream-processor ... done
Creating docker ... done
Creating ones-pty-server ... done
Creating ones-fm ... done
Creating ones-ui ... done
Creating api-server ... done
Name Command State Ports
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
api-server java -jar /app/apiserver.jar Up 0.0.0.0:8080->8080/tcp,:::8080->8080/tcp
broker /etc/confluent/docker/run Up 0.0.0.0:29092->29092/tcp,:::29092->29092/tcp, 0.0.0.0:9092->9092/tcp,:::9092->9092/tcp, 0.0.0.0:9101->9101/tcp,:::9101->9101/tcp
docker python3 app.py Up
kafka-connect /etc/confluent/docker/run Up (healthy) 0.0.0.0:8083->8083/tcp,:::8083->8083/tcp, 9092/tcp
ksqldb-server /etc/confluent/docker/run Up 0.0.0.0:8088->8088/tcp,:::8088->8088/tcp
ones-collector java -jar -XX:MaxGCPauseMi ... Up 0.0.0.0:50053->50053/tcp,:::50053->50053/tcp, 8093/tcp
ones-collector-db /docker-entrypoint.sh postgres Up 0.0.0.0:5432->5432/tcp,:::5432->5432/tcp, 8008/tcp, 8081/tcp
ones-fm /bin/sh -c { gunicorn --wo ... Up 0.0.0.0:8787->8080/tcp,:::8787->8080/tcp
ones-fm-db docker-entrypoint.sh postgres Up 0.0.0.0:2345->5432/tcp,:::2345->5432/tcp
ones-gateway ./gnmi-gateway -TargetLoad ... Up 0.0.0.0:9339->9339/tcp,:::9339->9339/tcp
ones-pty-server docker-entrypoint.sh node ... Up 0.0.0.0:8885->8885/tcp,:::8885->8885/tcp
ones-rule-service java -jar /app/rule-engine.jar Up 8080/tcp
ones-rule-service-db docker-entrypoint.sh postgres Up 0.0.0.0:2456->5432/tcp,:::2456->5432/tcp
ones-ui docker-entrypoint.sh node ... Up 3002/tcp, 0.0.0.0:443->443/tcp,:::443->443/tcp
schema-registry /etc/confluent/docker/run Up 0.0.0.0:8081->8081/tcp,:::8081->8081/tcp
stream-processor java -jar /app/stream-proc ... Up 8080/tcp
zookeeper /etc/confluent/docker/run Up 0.0.0.0:2181->2181/tcp,:::2181->2181/tcp, 2888/tcp, 3888/tcp
Completing ONES Installation...
............................................................
ONES application installed successfully!
....................
Access the ONES application at https://10.20.0.93
Log file created at: /home/aviz/ONES-3.1.0/installation.log
Access ONES Application Web GUI from a supported browser using https://<host-ip/FQDN>
Activation:
For a Trail license, the user needs to reach out to AVIZ Support
For Activation, the user can choose Activate License if the user has an activation key of any subscription
Users can activate the ONES Application first time just after installation(first-time ONES application shows the page to activate the license
After evaluating ONES application, the user will have the option to activate the license anytime from the License Page
1. Activate License
2. Activate Key
Use Default credentials as below;
Username: superadmin
Password : Admin@123
Update/Change your password on the first login
Password should contain:-
Minimum Password Length - 8 characters
Maximum Password Length - 24 characters
Character Support - Alpha Numeric
Special Characters - (# @ $ ! & % only)
Character Rule - At least one Upper Case and one special character
Login To ONES
After Resetting the password use new credentials to login
You will see the default Monitor Page with a Topology view
1. Upgrade License
After Trail use, if the user wishes to upgrade new Subscription-based license, so user can navigate to the below page.
Account >> License >> Upgrade License
Click Upgrade License & Enter the subscription-based key
If Switches Deployment is large so user needs to enable the large config inside Database Config File
Copy the postgresql.config file outside to do changes
edit the file and uncomment few lines to activate Large config and save the changes
vi dbconfig.conf
Uncomment the below lines in the above file is the change
#------------------------------------------------------------------------------
# LARGE CONFIGURATION - START
#------------------------------------------------------------------------------
timescaledb.max_background_workers = 16 # Increased for more concurrent background processes
# MEMORY SETTINGS (LARGE)
shared_buffers = 8GB # Adjust based on your available system memory
work_mem = 16MB # Set based on your workload; adjust as needed
maintenance_work_mem = 1GB # Important for bulk operations and autovacuum
effective_cache_size = 16GB # Estimate the cache available for PostgreSQL (usually 50-75% of system memory)
# WAL SETTINGS (LARGE)
wal_level = logical # Recommended for logical replication and high-volume streaming
max_wal_size = 8GB # Increase to accommodate more WAL data during peak operations
checkpoint_timeout = 15min # Spread checkpoint operations for better performance
checkpoint_completion_target = 0.9 # Further spreads the checkpoint process
wal_compression = on # Reduces WAL size, useful in high-traffic scenarios
# CONNECTION AND PROCESS SETTINGS (LARGE)
max_worker_processes = 16 # Increased to allow more background workers
max_parallel_workers = 16 # More parallel workers for better throughput
max_parallel_workers_per_gather = 4 # Adjust based on the complexity of your queries
# AUTOVACUUM SETTINGS (LARGE)
autovacuum_max_workers = 10 # Handle larger tables or high data churn more effectively
autovacuum_naptime = 10s # Increase the frequency of autovacuuming
autovacuum_vacuum_cost_limit = 5000 # Handle vacuum operations more aggressively
autovacuum_vacuum_scale_factor = 0.01 # Trigger autovacuum sooner on large tables
# PERFORMANCE SETTINGS (LARGE)
effective_io_concurrency = 500 # For SSDs, this can be set high to optimize I/O
synchronous_commit = off # Improves throughput at the cost of potential data loss in a crash
random_page_cost = 1.1 # Optimized for SSDs
seq_page_cost = 1.0 # Optimized for SSDs
jit = on # Enable JIT compilation for performance boosts in complex queries
#------------------------------------------------------------------------------
# LARGE CONFIGURATION - END
#------------------------------------------------------------------------------
