Architecture

Estimated reading: 4 minutes 1110 views

The architecture is designed to optimize operational efficiency while maintaining the highest standards of data protection. It incorporates key Azure services that support various aspects of the platform, from data storage and processing to authentication and monitoring. This strategic deployment enables the Robility Manager web application to deliver a seamless experience for users while ensuring business continuity and data integrity. Below is a detailed explanation of the hosting and operational structure, outlining the various components and their roles in the overall architecture.

Client Access & Interaction

1. Sutherland VM/Workstation
For organizations leveraging the Robility cloud deployment model, users interact with the Robility Manager application through virtual machines (VMs) or workstations provisioned by Sutherland. These systems act as the primary interface, with all essential client-side tools, including the Designer and Runner interfaces, pre-installed. This setup ensures seamless access to the platform while maintaining consistency and compatibility with the cloud infrastructure.

2. Client VM/Workstation
In the Robility hybrid deployment model, organizations use their internal VMs or workstations for accessing the Robility Manager application. The Designer and Runner tools are installed on the client’s VM, ensuring integration with existing applications. 

3. Network Security
All user requests, whether originating from Sutherland-provided or client-managed VMs/workstations, pass through the Sutherland Azure Next-Generation Firewall (NGFW). This firewall serves as a secure gateway, protecting the system against unauthorized access, malicious attacks, and other potential threats. It ensures encrypted traffic flow and enforces stringent security policies, providing users with a robust and trusted interaction framework.

API Gateway

Once requests are authenticated and filtered through the NGFW, they are forwarded to the API Gateway. This gateway acts as the centralized entry point for all client interactions with the Robility Manager’s backend services.

The API Gateway performs critical functions, including:

  • Request Routing: Directing incoming requests to the appropriate backend service or resource.
  • Load Balancing: Distributing traffic across multiple servers to optimize performance and ensure high availability.
  • API Security: Managing access control, rate limiting, and monitoring to protect backend services from misuse or attacks.

By handling these operations efficiently, the API Gateway ensures smooth and secure communication between users and the application.

Robility Resource Group

The Robility Resource Group encompasses all the core infrastructure and services required for the operation of the Robility Manager application. It is hosted on Azure and includes the following components:

1. Web App Services
The Robility Manager web application is hosted as a scalable and secure web service. It can be accessed by users via HTTPS at https://robility.ai over port 443, ensuring encrypted and authenticated communication.

2. Web APIs
A suite of REST APIs powers the application’s modular architecture, supporting diverse functionalities and promoting integration with external systems. These APIs include:

a. Logon Service: Handles authentication and user access control, ensuring secure login processes.
b. License Manager: Manages license allocations and tenant-specific configurations.
c. Storage Service: Supports robust data storage and retrieval mechanisms.
d. Robility REST APIs: Provides key endpoints for automation, user interactions, and system integrations.

Key API functionalities include:

  • Designer Service: Supports workflow design and configuration.
  • Runner Service: Manages execution of workflows and automation tasks.
  • Feature Service: Enables dynamic feature enablement for tenants.
  • Credential API: Safeguards user credentials for secure operations.
  • Interact API: Facilitates seamless interactions between Robot and the Robility Manager.
  • App Integration API: Enables integration with third-party applications.
  • Azure Blob Storage Service: Manages storage of large files and workflows.
  • Azure Key Vault Service: Ensures secure management of sensitive information like passwords and certificates.

Data and Storage

1. Azure SQL Managed Instance (SQL MI)
The Azure SQL Managed Instance provides a secure and scalable environment for hosting tenant-specific databases. Each tenant’s data is isolated within its database (e.g., Tenant #1, Tenant #N), ensuring privacy and multi-tenancy. This setup supports rapid data access and robust performance for all operations.

2. Azure Blob Storage
Azure Blob Storage is used to manage the storage of published workflows and files processed by the Robility Interact feature. This service is optimized for scalability, enabling efficient handling of large volumes of data without compromising performance.

3. Azure Key Vault
Azure Key Vault provides a secure repository for storing sensitive information, such as API keys, secrets, and certificates. By integrating with the Robility Manager architecture, it ensures that critical information is encrypted and accessible only to authorized users and systems.

Share this Doc

Architecture

Or copy link

CONTENTS