Hybrid Deployment

Set up Traceloop with data sovereignty

The Hybrid deployment model allows you to maintain full control over your data storage while leveraging Traceloop’s managed services for processing, monitoring, and observability.

Architecture Overview

• Your Infrastructure: Hosts only the ClickHouse database for data storage
• Traceloop Managed: Handles processing pipelines, monitoring, and the dashboard
• Data Flow: Data is processed through Traceloop’s infrastructure but stored only in your ClickHouse instance

Setup Process

1. Deploy ClickHouse

   Choose one of these deployment methods:

   Option A: Using CloudFormation/Terraform (Recommended)

   Contact Traceloop team for the CloudFormation template or Terraform configuration

   Option B: Using Helm on Kubernetes

   # Add Altinity Helm repository
   helm repo add altinity https://altinity.github.io/kubernetes-blueprints-for-clickhouse
   helm repo update
   
   # Install ClickHouse
   helm install ch altinity/clickhouse \
     --namespace traceloop \
     --create-namespace \
     --values clickhouse-values.yaml
   

   Example clickhouse-values.yaml:

   clickhouse:
     persistence:
       enabled: true
       size: "100Gi"
   
     service:
       type: LoadBalancer
   
     defaultUser:
       # Make sure to change these values
       password: "your-secure-password"
       allowExternalAccess: true
   
2. Configure Network Access

   Provide the following details to the Traceloop team:

   1. ClickHouse Connection Details:

      • Endpoint URL
      • Port number (default: 9000)
      • Database credentials

   2. Network Security Requirements:

      • IP ranges for whitelisting
      • VPC peering requirements (if applicable)

   We support multiple security configurations:

   • IP Whitelisting: Restrict access to specific IP ranges
   • VPC Peering: Secure private connection between your VPC and Traceloop’s environment
   • SSL/TLS: Encrypted communication for all data in transit
   • Custom Certificates: Support for your own SSL certificates

   Store your database credentials securely and rotate them periodically.

3. Verify Setup

   After setup, the Traceloop team will:

   1. Configure the connection to your ClickHouse instance
   2. Perform connectivity tests
   3. Validate data flow and storage
   4. Provide access to the Traceloop dashboard

Need Help?

• Schedule a support call
• Join our community Slack