Hi Team, I have a question regarding the communication model of fleetdm. I can't really find an architecture picture that describes the communication between the agent running on every machine and the central fleetdm server. Is there only a pull based communication (agent -> Server) or is there a bidirectional communication (agent <-> server)? Thank you in advance!

hi @Bjoern ! does this help?

Hi @Zay Hanlon, Sorry for this stupid question. I saw this picture and saw the two arrows from osquery to LB and from LB to osquery and thought about bidirectional communication but couldn't believe it. So reading HTTPS request / HTTPS response would have helped a lot. TL;DR; RTFM. sorry.

Hi @Bjoern! It's "pull based" HTTPS. This article might help too: https://fleetdm.com/guides/fleetd-authentication

Thanks @Lucas Rodriguez 🙂