Dualog Endpoint - Caching

Introduction

The caching feature in the Dualog Endpoint service helps conserve bandwidth by storing
updates locally when multiple installations download updates on a ship. It functions like a
proxy server, with one installation mediating communication between the internet and
onboard computers. This is crucial for ensuring that frequent security updates are applied
efficiently, keeping systems up to date with the latest security patches.

The caching feature is accessible from the Endpoint page on the Dualog Apps Portal, under
the Configurations tab.

Current Elected Cache

When selecting a ship to configure, you will see a list of currently elected caches on that
ship. This list includes details such as the cache’s IP address and port, the network IP, and
the last time the configurations were updated.

Cache Election & Candidates

Before an installation can be designated as the network cache, it must first be enabled as a
cache candidate. An installation connected to multiple networks on the ship is ideal, as it
can serve multiple installations across different LANs and will be ranked higher in the
cache election process. If all installations are enabled as cache candidates and have
identical network configurations, priority will be given to the one first elected as the cache.

If you want to force a specific installation to act as the cache, you can do so by unselecting
all the other cache candidates.

Routing Through Dualog

Another option in the caching section is the Route through Dualog setting. Enabling this
option ensures that all security updates are downloaded from apps.dualog.com:2223,
allowing you to configure the firewall to restrict access solely to Dualog’s IP and port
configuration. However, this may impact download performance if Dualog’s data centers
are located farther away.

Disabling the Route through Dualog option allows cache installations to retrieve updates
directly from ESET’s public servers. While this requires internet access, it can improve
download performance.

Cache Port Configuration

The last option in the caching section is configuring the cache port. This setting allows you
to specify which port the cache service will use for communication with other installations.
Choosing an appropriate port ensures compatibility with your firewall rules and security
policies. If the cache port is blocked or conflicts with other services, you can adjust it to an
available port to maintain seamless distribution of updates across installations.

Conclusion

Properly configuring the caching feature optimizes bandwidth usage, ensures efficient
security updates, and improves overall system performance. By selecting the right cache
candidates, deciding whether to route updates through Dualog, and configuring the
appropriate cache port, you can enhance your ship’s network efficiency while maintaining
security and update reliability.