Skip to content

Factory Studio — deployment

Target

This page describes intended behaviour or structure. No implementation is claimed unless a section is explicitly marked Current implementation or Evidence.

Host Modules Topologies
StudioBff 5 saas-default, hybrid, on-prem
StudioRealtimeGateway 0 saas-default, hybrid, on-prem

Shape

flowchart TB
    U[Browser · CLI · VS Code] --> GW[Edge gateway GW-01 · TLS · rate limits · token validation]
    GW --> SHELL[Blazor shell + microfrontends · static assets · CDN]
    GW --> BFF[StudioBff · GW-02 · 2–8 replicas]
    GW --> RT[StudioRealtimeGateway · cohosted first]
    BFF --> N[StudioNotificationService module]
    BFF --> SQL["(studio-sql)"]
    BFF & RT --> REDIS["(cache · SignalR backplane)"]
    BFF --> ID[Identity platform]
    BFF --> P[every platform host · gRPC]
Hold "Alt" / "Option" to enable pan & zoom

Per topology

Topology Shell assets BFF and realtime Identity Notes
saas-default Azure Front Door / CDN AKS behind the API gateway template the Factory's Authorization Server (OpenIddict) with tenant federation default
hybrid as saas-default as saas-default federated to the customer's IdP the Studio stays in Azure; data stays where its platform is
on-prem served by the gateway the customer's cluster the customer's IdP through the Authorization Server realtime backplane on the customer's Redis
hybrid-compute as saas-default as saas-default as saas-default

Clients distribution

The CLI ships as a .NET global tool from the Factory's package feed per installation; the VS Code extension from the marketplace with the installation URL configured; the SDK from the same feed. Versions are compatible across one minor of the BFF contract; the BFF advertises its contract version in /studio/session.

Data and recovery

studio-sql holds sessions, saved views, notifications and preferences: RPO 60 min, RTO 4 h is sufficient because nothing in it is factory truth; sessions re-create on sign-in. Retention: sessions 30 days, notifications 90 days.

Ports and runtime

BFF HTTPS 8200, gRPC 8202, silo 12200, gateway 31200 (messaging profile studio); realtime gateway HTTPS 8210 when separated. Secrets studio-sql, studio-signing.