Deployment Modes
DataRelay Link supports two Server deployment modes.
Direct
Typical public listeners include:
Enterprise single-443
Management/enrollment HTTPS and Relay control share public TCP/443 through the DataRelay Link frontend, while internal backend listeners remain loopback-only.
Remote Service endpoints remain separately allocated from their configured endpoint pools.
Important boundaries
Changing deployment mode must preserve the v2.4 control-plane database, Managed Host/Agent identities, Remote Services, endpoint reservations, policies, and trust material.
The installer does not change cloud security groups, customer firewall/NAT rules, or DNS-provider records.
Use single-443 when restrictive enterprise networks permit standard HTTPS/WSS on 443 but interfere with TLS on non-standard ports.
MCP deployment
Public remote MCP requires single443. Direct Relay control on TCP/443 is not HTTPS MCP. Follow Claude / ChatGPT setup. A planned mode migration uses the same-version Server installer and validated backup because connections can be interrupted.Last modified on October 28, 2026
