What an executor does
Executors are the only part of Topolux that touches your network devices. An executor picks up an issued task from the platform, obtains the credentials, connects to the devices, runs the commands and sends the raw output back to the platform as evidence.
- Only what is authorized: the platform verifies which devices each task may reach and which commands it may run before issuing it. The executor does exactly what was issued and never starts anything on its own.
- Pulls its own tasks: the executor connects out to the platform to pick up tasks. The platform never pushes commands into your network, so you do not need to open any inbound access for it.
- Read-only: executors run only read-only commands and limited connectivity probes (ping and tracert), and currently never change device configuration.
Two kinds of executor
The same executor capabilities, installed in two places:
- Phone executor: built into the mobile app. Connect to the management network on site and it is ready to use. Best for a few devices on site.
- Standalone executor: a single Windows x64 program installed on an always-on PC inside your network. It works unattended and suits larger networks.
| Capability | Phone executor | Standalone executor |
|---|---|---|
| Read-only commands over SSH / Telnet | Yes | Yes |
| SNMP collection | — | Yes |
| Unattended scheduled tasks | — | Yes |
Standalone executor
Requirements
Windows x64. A single executable file with no separate runtime to install. The PC needs to reach the device management network and make outbound HTTPS connections to the Topolux platform. No inbound access is needed, and no access to other internet sites. See Download.
Registration
Generate a registration code on the executors page of the web console or the mobile app (single use, valid for one hour), then use it on the standalone executor to register. Once registered, you can see its online status, version and number of evidence items waiting to upload from either place, and revoke it when you no longer need it.
Credentials
Device credentials for the standalone executor are entered on the web or in the app. The platform stores them encrypted and releases them, together with the authorization, only when a task runs. CLI login credentials and SNMP v2c / v3 (authPriv) credentials are supported.
Which one to use
A standalone executor suits larger networks, and situations that need scheduled inspections or SNMP collection. The phone executor suits handling a few devices on site. You can use both at once: a task can name a default execution location and one backup location of the other kind, so a standalone executor and a phone can back each other up.