Architecture

Acme has two parts: the Acme cloud (portal and services, run by Acme) and the connector (a container you run in your environment).

flowchart LR
  subgraph Your["Your environment"]
    DB[(Database)]
    APP[Application]
    LOG[Logs]
    CON[Acme connector]
    DB --> CON
    APP --> CON
    LOG --> CON
  end
  subgraph Cloud["Acme cloud"]
    GW[Connect gateway]
    SVC[Acme services]
    PORTAL[Acme portal]
    GW --> SVC --> PORTAL
  end
  CON -- "HTTPS 443 (outbound only)" --> GW
  USER([Your team]) --> PORTAL

Key points

Outbound only. The connector opens the connection to Acme. You do not open any inbound ports.
Encrypted. All traffic uses TLS over port 443.
Read access. The connector reads from your data sources using credentials you provide. It does not change your data.
Managed in the portal. You add and change data sources in the portal. The connector picks up changes automatically.

Where things run

Component	Runs where	Managed by
Acme portal	Acme cloud	Acme
Connect gateway and services	Acme cloud	Acme
Connector	Your environment (Docker host)	You
Data sources	Your environment	You