Get Started
Installation
Ixiea deploys to Kubernetes using the Helm chart in the deploy repository. Images are published to ghcr.io/ixiea/*. PostgreSQL and Redis run as external services. They are not bundled in the chart.
Prerequisites
- A Kubernetes cluster (1.24+) with a default storage class if you enable in-cluster dependencies
- PostgreSQL and Redis reachable from the cluster
helm3.x andkubectlconfigured for your cluster- A DNS name or load balancer address for the gateway (for example
ixiea.example.com)
Install with Helm
- Clone or copy the Ixiea
deploychart onto a machine with cluster access. - Generate secrets for the control plane:
secretKey, random string for Django/cryptobootstrapToken, shared token for protocol connectors
- Install the core stack with the Ixiea values overlay:
helm upgrade --install ixiea ./charts/ixiea \ -f ./charts/ixiea/values.yaml \ --namespace ixiea --create-namespace \ --set core.config.secretKey=<random> \ --set core.config.bootstrapToken=<random> \ --set core.config.domains=<host>:443 \ --set externalDatabase.host=<postgres-host> \ --set externalDatabase.password=<password> \ --set externalRedis.host=<redis-host> \ --set externalRedis.password=<password> - Optional, enable additional connectors (database proxy, RDP proxy, VNC proxy) by registering terminal proxies in the platform core and passing
terminalIdand API keys to Helm. Contact your Ixiea account team for connector values overlays. - Wait for pods to become ready:
kubectl -n ixiea rollout status deploy/ixiea-core - Open
https://<your-host>in a browser and log in as an administrator.- Default username:
admin - Default password:
ChangeMe
- Default username:
- Change the administrator password on first login, then continue with the Quickstart to create your first asset and session.
Air-gapped and offline installs
For air-gapped environments, mirror ghcr.io/ixiea/* images into your registry and point global.imageRegistry at that mirror in your values file. Offline install packages are provided through your Ixiea account team , contact us for delivery credentials and supported versions.
Next steps
- Quickstart, create an asset, grant access, and connect
- Import license, activate your Ixiea license
- Enable HTTPS, terminate TLS at the ingress or load balancer
- Upgrade, roll forward to a new image tag