Intelligent 24/7 Remote Monitoring & Predictive Analytics for Modular and Small Data Centers

# /etc/tes/collector.yaml
hub:
  url: https://hub.tesmonitoring.com/api/v1
  site_id: SITE-EU-01
  collector_id: COL-MODULAR-01
  key_file: /etc/tes/site.key        # Per-site HMAC-SHA256 secret key
schedule:
  sample_interval_s: 15              # High-frequency local polling
  transmit_interval_s: 60            # Aggregated min/avg/max push
spool:
  path: /var/lib/tes/spool
  retention_h: 72                    # 72-hour offline store-and-forward buffer
privacy:
  pseudonymize: true                 # Hash hostnames & serials at the edge
sources:
  - type: nvidia_smi
    binary: /usr/bin/nvidia-smi
  - type: dcgm_exporter
    url: http://127.0.0.1:9400/metrics
  - type: ipmi_redfish
  - type: snmp_modbus

POST /api/v1/ingest/batch HTTP/1.1
Host: hub.tesmonitoring.com
X-TES-Site: SITE-EU-01
X-TES-Collector: COL-MODULAR-01
X-TES-Timestamp: 2026-10-28T14:30:00Z
X-TES-Signature: 8f9c2b4e7a1d... (HMAC-SHA256)
Content-Encoding: gzip

{
  "batch_id": "6f1c2a1e-6c3b-4f43-9a55-2b8f1f0b7d10",
  "collector": {"id": "COL-MODULAR-01", "version": "1.0.0"},
  "interval_s": 60,
  "samples": [
    {"ts": "2026-10-28T14:29:00Z", "device": "R03-S07-GPU2", "metric": "gpu.temperature", "avg": 71.4, "min": 69.8, "max": 73.1},
    {"ts": "2026-10-28T14:29:00Z", "device": "R03-PDU1", "metric": "rack.power", "avg": 18.6, "min": 18.1, "max": 19.4}
  ]
}

$ tes-collector --security-report
[✓] runtime.user ........... uid=10001 (non-root)
[✓] rootfs ................. read-only (rw: /var/lib/tes/spool only)
[✓] inbound.listeners ...... 0 (no listening sockets)
[✓] command.handlers ....... none (telemetry push only)
[✓] transport .............. HTTPS outbound :443, TLS 1.2+
[✓] auth ................... HMAC-SHA256, per-site key /etc/tes/site.key
[✓] replay.window .......... ±300 s, idempotent by batch_id
[✓] spool .................. store-and-forward, retention ≥ 72 h
[✓] privacy ................ pseudonymize=true (host_alias, serials → hash)
[✓] resources .............. 1 vCPU · 1 GB RAM · 10 GB disk

# Signature scheme
X-TES-Signature = hex(HMAC-SHA256(site_key, timestamp + "." + body))

# check & run — note: no "-p" flag, no published ports
docker run -d --name tes-collector \
  --user 10001:10001 --read-only \
  --cap-drop ALL --security-opt no-new-privileges \
  -v /etc/tes/site.key:/etc/tes/site.key:ro \
  -v /etc/tes/collector.yaml:/etc/tes/collector.yaml:ro \
  -v tes-spool:/var/lib/tes/spool \
  registry.tesmonitoring.com/edge-collector:1.0.0