# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# CherryBlossom -- Installation Guide

19 July, 2012

- 1
- 2
…
- 4
- 5
- 6
- 7
- 8
…
- 20
- 21

SECRET//20350112
4.3 (U) Master and Slave Architecture
(U) A CB system has a Master CB-CC server that is running all of the necessary CB-CC
processes and a Master CB-VPN Server running all of the necessary CB-VPN processes.
A CB system also has a hot spare CB-CC Slave server and a hot spare CB-VPN Slave
server. If a Master server fails, the Master server can be taken offline for repair/diagnosis
and the Slave server can be converted to the Master server. When the failed server is
returned to the system, it will become the Slave. Section 7 documents that process of
converting a Slave to a Master server.
4.3.1 (U) CB-CC Data Replication
(U) The CB-CC Slave server performs replication/backup duties of the CB-CC database
and other relevant data. The CB-CC Server uses a mysql database to store system data,
and it stores Copy Data in flat files. The mysql replication feature is used to keep an in-
sync copy of the CB-CC database on the Slave server. The “rsync” utility is used to keep
an in-sync copy of CB-CC Copy Data on the Slave server (nominally every 5 minutes).
4.4 (U) CB Server Hardware and Operating System
(U) The “Production/Operational/Legacy” system’s CB-CC Servers (both Master and
Slave) are Dell Poweredge 1850 servers running Red Hat Fedora 9.
(U) The “CT2010” system’s CB-CC Servers (both Master and Slave) are virtual servers
running Red Hat Fedora 9.
(U) Both the “Production/Operational/Legacy” and “CT2010” systems use the same CB-
VPN Servers. One of the CB-VPN Servers is a Poweredge 1850 running Red Hat Fedora
9, and the other is a virtual server running Red Hat Fedora 9.
(U) All Dell Poweredge 1850 CB Servers have (at least) 2 Gigabytes of RAM, and (at
least) 160 Gigabytes of RAID hard disk space.
(U) Refer to the Dell Poweredge 1850 Server Manuals for more information. Sponsor
personnel (see section 3) are cognizant of the virtual server configuration.
4.5 (U) CB Server Physical Location
(S) All CB servers (CB-CC and CB-VPN Masters and Slaves) from both the
“Production/Operational/Legacy” and “CT2010” are housed in a secure sponsor facility.
4.6 (U) CB Server Requirements
(U) A server slated to be a CB server (either CB-CC or CB-VPN), must meet the
following requirements:
• OS: Red Hat Fedora 9
• Hard Drive: RAID with at least 160 Gigabytes
• RAM: at least 4 Gigabytes
• DRAC interface
• CPU: i386, 4 cores, 2.0 GHz or better
SECRET//20350112
6

- 1
- 2
…
- 4
- 5
- 6
- 7
- 8
…
- 20
- 21