Private locations

A private location is a heimdall-probe agent you run yourself: in a data centre, an office or a cloud VPC. It checks services that are not reachable from the internet and votes in the quorum like a public region.

How it works

• The agent opens an outbound TLS connection to Heimdall; no inbound ports are needed
• It receives the monitors assigned to its location and schedules them locally
• Results stream back; if the connection drops, the agent keeps checking and catches up

Get the probe

The probe program for private locations is not published for download yet. For now we provide it on request: write to contact@warewave.tech and we send you the binary for your platform.

Install

1. In the app, open Settings → Private locations, add a location and create a probe token for it. The token starts with hpt_ and is shown once.
2. Put the token in a file that only the user the probe runs as can read, for example /etc/heimdall/probe-token (mode 0600).
3. Start the probe. The token decides the location; there is no location to name on the command line.

heimdall-probe --token-file /etc/heimdall/probe-token --server https://heimdall.warewave.tech

The token can also come from the environment, in a container for example. The binary we send you has Heimdall’s address built in, so --server can be left out:

HEIMDALL_PROBE_TOKEN=hpt_… heimdall-probe

The probe shows up under the location’s “Probes” within about 15 seconds of starting.

Requirements

• Linux on amd64 or arm64 (a Raspberry Pi works)
• Outbound HTTPS (port 443) to Heimdall
• A clock synchronised with NTP