Splunk AppDynamics On-Premises Virtual Appliance (Self-Hosted)

Splunk AppDynamics On-Premises Virtual Appliance referred as Virtual Appliance, offers robust solution to package, deploy and operate the Splunk AppDynamics software. This is a self-hosted deployment that reduces the onboarding time by streamlining the process. Virtual Appliance packages compatible versions of Splunk AppDynamics services, such as, Controller, Events, and End User Monitoring. Splunk AppDynamics components are containerized and deployed as Kubernetes^® (K8s) services packaged with the Virtual Appliance image.

Virtual Appliance supports add-on features such as:

Anomaly Detection and Root Cause Analysis that help you reduce the Mean Time to Detect (MTTD) and Mean Time to Identify (MTTI), see Anomaly Detection and Root Cause Analysis
Cisco Secure Application (CSA) that helps you to reduce the risk of security exposure, see Cisco Secure Application Services.

These add-on services are available for your environment based on your license agreement.

The following Splunk AppDynamics components are available along with the other infrastructure services:

To determine the component versions packaged with the Virtual Appliance OVA, see Virtual Appliance Package Contents .

Components

Third party names, logos, marks, and general references used in these materials are the property of their respective owners or their affiliates in the United States and/or other countries. Inclusion of such references are for informational purposes only and are not intended to promote or otherwise suggest a relationship between Splunk AppDynamics and the third party.

The Virtual Appliance comprises following components:

Component	Description
OS	Based on Ubuntu `22-04-lts`.
MicroK8s (Version 1.30)	Microk8s is a lightweight CNCF certified Kubernetes (k8s) distribution. Microk8s has been hardened to meet CIS k8s Benchmark v1.6.0. It offers a secure simple programmable process to bring up a k8s cluster.
Infrastructure Services	Splunk AppDynamics Services use the required infrastructure components such as, MySQL, Ingress controller, Elasticsearch, Kafka, PostgreSQL and so on.
Splunk AppDynamics Services	Splunk AppDynamics components such as, Controller, EUM, and Events service. To determine the component versions packaged with the Virtual Appliance, see Virtual Appliance Package Contents .

Deployment Model

The Virtual Appliance supports two deployment options:

Standard Deployment: Installs the Splunk AppDynamics Services, Infrastructure Services, Anomaly Detection and Cisco Secure Application Services in your Kubernetes cluster.
Hybrid Deployment: Leverages your current Controller, Events Service, and End User Monitoring components from Splunk AppDynamics On-Premises while installing Anomaly Detection and Cisco Secure Application Services in your Kubernetes cluster.

Architecture

The following image displays the communication among components in the Standard deployment:

Connection	Source and Destination	Traffic	Protocol	Default Ports
	Ingress Controller → Controller UI Controller UI → Ingress Controller	UI Calls and Responses	HTTPS	443
	Agents → Ingress Controller	APM Reported Data	HTTPS	443

The following image displays the communication among components in the Hybrid deployment:

Source and Destination	Traffic	Protocol	Default Ports
Ingress Controller in Kubernetes → Controller UI Controller UI → Ingress Controller in Kubernetes	UI Calls and Responses	HTTPS	443
Agents → Ingress Controller in Kubernetes		HTTPS	443
MySQL Service → MySQL Database of the standalone Controller	Controller Database calls	HTTPS	3388
MySQL Service → MySQL Database in the standalone Controller	Controller Database calls	HTTPS	8181/443 3388
Standalone Controller → Kafka Service in Kubernetes	Kafka Calls for Anomaly Detection and Root Cause Analysis	HTTPS	32101
			32102
			32103