Skip to main content

Installation and Administration Guide

What Is a Data Plane?

A data plane is a set of services used for the reading, writing, and processing of data. It contains a data agent and services capable of provisioning data, such as a data proxy or an integration using the Privitar SDK.

You create a data plane following the creation of a data exchange. See Create and Edit a Data Plane.

A data plane has the following components:

  • The data agent provides access to the data plane whenever required by the control plane, for example to retrieve the schema for a data asset. It makes a long-lived connection to the data bridge on startup.

  • The data proxy is a Java Database Connectivity proxy (JDBC proxy) that allows data consumers to access sensitive data to which de-identification policies have been applied. It makes calls to the data bridge to fetch the information it needs, for example the details of how to connect to the sensitive data and the policies to be applied.

The data agent and data proxy components share logic for creating the gRPC Remote Procedure Call (gRPC) clients that call the data bridge. Each data plane contains, at most, one (replicated) installation of each component.

Security_between_Services_in_the_Privitar_Data_Provisioning_Platform.png

Containerization

The platform bundles the data plane components in containers (by default Kubernetes).

You can deploy the data agent and data proxy to two separate Kubernetes clusters. However, you can install the required JDBC drivers in a single location.