Global VSA Integration
Connect this SecureLink orchestrator to a Global VSA (Virtual Service Aggregator) instance for centralized multi-orchestrator management.
Overview
Global VSA provides a single management plane across multiple SecureLink orchestrator deployments. When connected, Global VSA can:
- Control which features are available per tenant on this orchestrator
- Collect aggregated metrics from all connected orchestrators
- Provide centralized billing data and usage reports
- Manage feature licensing across the fleet
Global VSA integration is optional. Without it, all features are enabled by default and the orchestrator operates independently.
Configuration
Navigate to Settings > System > Global VSA to configure the connection.
| Setting | Description |
|---|---|
| Global VSA URL | The base URL of the Global VSA instance (e.g., https://vsa.securelink.example.com) |
| Client ID | OAuth2 client ID provided by the Global VSA admin when provisioning this orchestrator |
| Client Secret | OAuth2 client secret for authenticating with Global VSA |
| Feature Sync Interval | How often to pull feature flag updates from Global VSA (default: 5 minutes) |
| Metrics Reporting Interval | How often to push tenant metrics to Global VSA (default: 10 minutes) |
Setup Process
- A Global VSA administrator provisions this orchestrator in the Global VSA dashboard
- The Global VSA admin provides a Client ID and Client Secret
- Enter these credentials along with the Global VSA URL on this page
- Click Test Connection to verify connectivity
- Click Save to activate the integration
Feature Sync
Once connected, Global VSA controls which features are available per tenant on this orchestrator.
- Feature flags are pulled from Global VSA at the configured sync interval
- Changes made in Global VSA are reflected on this orchestrator within one sync cycle
- If Global VSA is unreachable, the last-known feature flag state is preserved
- Local feature flag overrides are not possible when Global VSA integration is active
The sync process updates the tenant_feature_flags table, which is then consulted when building edge batch configurations and rendering the UI.
Metrics Reporting
This orchestrator reports tenant-level metrics to Global VSA at the configured interval:
| Metric | Description |
|---|---|
| Edge Count | Number of registered edge devices per tenant |
| Device Count | Total devices (edges + connectors) per tenant |
| Active Edges | Number of edges currently online |
| Feature Usage | Which features are actively in use per tenant |
These metrics power the Global VSA dashboards, billing reports, and usage analytics.
Connection Status
The Global VSA settings page displays current connection health:
| Field | Description |
|---|---|
| Connection Status | Connected, Disconnected, or Error |
| Last Feature Sync | Timestamp of the most recent successful feature flag pull |
| Last Metrics Report | Timestamp of the most recent successful metrics push |
| Sync Errors | Count and details of recent sync failures |
If the connection is lost, the orchestrator continues to operate normally using the last-known feature flags. Metrics are queued and delivered once connectivity is restored.