Overview

OpenSpecimen can be hosted on-premise in a customer’s data center. The below network topology diagram depicts the typical implementation.

Prerequisites

• The customer should provide the VMs for deploying OpenSpecimen

• The customer should provide remote access accounts to login into the VPN

Network topology diagram

Description

• OpenSpecimen is a “classical three-tier web application” with web, app, and db layers.

• For the production instance, the database and app server is installed on different VMs.

• For the test instance, the database and app are installed on the same machine.

• Typically the web and app servers are installed on the same machine. If OpenSpecimen has to be accessible from outside the VPN, we can install the web server on a different VM on the DMZ.

• SSL certificate, if provided by the client, is installed on the Apache webserver.

SAML/LDAP Integration

OpenSpecimen can be integrated with the institution’s Identity Provider (e.g., Microsoft ActiveDirectory). Refer to Configuring Identity Providers for more details.

Hardware Requirements