Expeto xControl⚓︎
xControl is the management plane of the Expeto Platform. It is a multi-tenant web application and REST API, hosted by Expeto or deployed in a Mobile Network Operator's (MNO) own Kubernetes cluster, from which the MNO and its enterprise customers provision Mobile Assets, define network segments and policies, and monitor every Site they operate.
Each xCore and xRouter Site runs an Expeto Agent that connects outbound to xControl over TLS. The Agent keeps the Site's subscriber data and configuration in sync and reports sessions, usage and metrics back. A Site never needs an inbound connection, and it keeps serving traffic while its connection to xControl is down: changes made in the meantime are queued and delivered when the Agent reconnects.
What you manage in xControl⚓︎
- Mobile Assets: SIM and eSIM provisioning, bulk import, update and delete, status and session history.
- Sites and Systems: the Sites you operate and the network segments (Systems) they serve, each with its own IP range.
- Policy: System Profiles with service levels and data limits, APNs, Roaming Profiles and Carrier Groups.
- Private Radios: eNodeB and gNodeB registration for private radio Sites.
- Accounts and Customers: nested tenancy with Role-Based Access Control (RBAC).
- Monitoring: dashboards, reports, revision history and, when it is installed alongside, xView.
Everything the web interface offers is also available through the REST API.
Components⚓︎
An xControl installation is a single Helm release. Its parts, and the URL path each one is served under, are:
| Component | Role | Path |
|---|---|---|
| API server | Backend for the web interface and the REST API, and the endpoint the Agents connect to. | / |
| Frontend | The web interface. | /ngui |
| Keycloak | Single sign-on for xControl users. | /auth |
| ActiveMQ | Message broker carrying events between the API server and the Agents. | /events |
| PostgreSQL | The database, run as a CloudNativePG cluster. | internal |
| Documentation | This guide and the End-User Guide. | /admin-docs, /docs |
| xView (optional) | Metrics storage, alerting and Grafana dashboards for the whole platform. | /nms |
The Installation section covers cluster requirements, the Helm install and day-two operation.
Role based permissions⚓︎
xControl is multi-tenant. Accounts belong to Customers, Customers can be nested, and every Account carries a role that determines which functions and which data it can reach. A subordinate Account only sees the Customers, Sites and Mobile Assets inside its own branch of the hierarchy.
Roles are predefined and assigned when an Account is created or edited. See Role Permissions for the full matrix.