Skip to main content

☁️ Cloud Architecture Overview

GCXONE is built on modern cloud-native principles to provide a unified Video Surveillance as a Service (VSaaS) and IoT security management ecosystem.

1. The Core VSaaS Model

GCXONE operates entirely in the cloud, eliminating the complexity of traditional on-premise systems. By shifting to a SaaS model, organizations gain agility, scalability, and freedom from hardware maintenance.

  • No Local Servers: Elimination of dedicated local NVR/DVR maintenance.
  • Infinite Scalability: Add sites and cameras instantly without hitting physical hardware limits.
  • Centralized Management: Deploy security patches and features globally in seconds.

2. Infrastructure Stack (AWS)

The platform is hosted on Amazon Web Services (AWS) using a containerized microservices architecture managed by Kubernetes (EKS).

Compute & Orchestration

  • Private EKS Clusters: Core application logic runs on secure, private worker nodes.
  • Auto-Scaling: Node groups adjust resources in real-time based on traffic and processing load.
  • Messaging: Uses Amazon MQ for asynchronous event synchronization across the global platform.

Storage & Data

  • Asset Storage: Snapshots and icons are stored in encrypted S3 Buckets.
  • Metadata Management: Uses scalable NoSQL databases for lightning-fast camera metadata retrieval.

3. The Universal Translator (Proxy Layer)

The "Proxy Architecture" is GCXONE's core innovation. It allows the platform to communicate with diverse hardware manufacturers (Hikvision, Dahua, Axis, etc.) by translating their proprietary protocols into a standardized unified command set.


4. Multi-Tenant Logical Hierarchy

Data isolation is enforced through a strict multi-tenant model. Each organization lives in a dedicated "Tenant" space, ensuring data privacy and granular access control.

  1. 🏢 Tenant: The monitoring station or master org.
  2. 👤 Customer: Individual client organizations.
  3. 📍 Site: Physical facilities (e.g., Office, Warehouse).
  4. 📟 Device: NVRs or Gateways at the site.
  5. 🎥 Sensor: Individual camera channels or PIR sensors.

5. Security & Compliance

Security is integrated at the architectural level, not added as a bolt-on feature.

LayerImplementation
EncryptionData at rest and in transit secured with AES-256.
Access GatingJump Servers and private VPCs isolate infrastructure from the public web.
AuthenticationIntegrated with Auth0 for enterprise-grade MFA and SSO.
Continuous AuditEvery system call and operator action is logged in an immutable audit trail.


Next: Developer Tools & API Integration