Page tree


Important Note

The minimum system requirements specified for on-prem hosts must be dedicated to the on-prem host you plan to deploy. They cannot be shared with or used for other non-Infoblox applications. Doing so will negatively affect the performance of your BloxOne services. For information about the minimum system requirements and port usage, see the following:


Before you start the deployment, complete the following:

  • Ensure that your Docker environment meets the minimum deployment requirements.
  • Open all required ports on the on-prem hosts, as list in Port Usage for Bare-Metal On-Prem Hosts, in addition to the ports required for firewalls.
  • Ensure that there are no other processes using port 53 on the host system on which your on-prem host will be deployed. For example, some Ubuntu systems running local DNS cache (system-resolved) might occupy port 53, and your on-prem host might not function properly in this case.
  • Dind (Docker-in-Docker) configuration is not supported for on-prem host deployments.

To deploy on-prem hosts in a Docker environment, complete the following:

  1. In the Cloud Services Portal, go to Administration -> Downloads.

  2. On the Downloads page, click Download Package for Docker, and then save the .tar.gz file on your system.

  3. Set up the Docker environment on your system. Ensure that the Docker version is supported, as described in Deployment Requirements and Port Usage for Bare-Metal On-Prem HostsFor information about how to install Docker, refer to the Docker Documentation.

  4. Download the Infoblox Docker image tar file to your server, and then execute the following command at root. Note that you must have root privileges to execute Docker commands.

    # docker load -i <BloxOne_OnPrem_Docker_<VERSION>.tar.gz

  5. The system displays the download process. The following is a sample display:

    7cbcbac42c44: Loading layer [====================================>] 5.05 MB/5.05 MB
    d6f064e063f6: Loading layer [====================================>] 2.218 MB/2.218 MB
    f77e7ee6f8c6: Loading layer [====================================>] 69.11 MB/69.11 MB
    fa005789404e: Loading layer [====================================>] 4.096 kB/4.096 kB
    4024a9f13d19: Loading layer [====================================>] 12.05 MB/12.05 MB
    70fdf570286f: Loading layer [====================================>] 4.608 kB/4.608 kB
    e8b22bfeae7a: Loading layer [====================================>] 4.608 kB/4.608 kB
    6fabe6521295: Loading layer [====================================>] 4.608 kB/4.608 kB
    5f70bf18a086: Loading layer [====================================>] 1.024 kB/1.024 kB
    Loaded image: infobloxcto/onprem.agent:x.x.xx
  6. Execute the following command to verify that the Infoblox Docker image has been downloaded properly:

    # docker images
    REPOSITORY                   TAG      IMAGE ID        CREATED         SIZE
    infobloxcto/onprem.agent    3.1.xx    68f5ed0a1645    20 hours ago    96.9MB
  7. On the Docker system, execute the following command:

    sudo docker run -d \
      --name blox.noa \
      --network=host \
      -v /var/run/docker.sock:/var/run/docker.sock \
      -v /var/lib/infoblox/certs:/var/lib/infoblox/certs \
      -v /etc/onprem.d/:/etc/onprem.d/ \
      -v /etc:/mount/etc:ro \
      -v /usr/share/zoneinfo:/usr/share/zoneinfo:ro \
      infobloxcto/onprem.agent:<VERSION> \
      --jointoken $JOIN_TOKEN


    You must use “blox.noa” as the container name. DO NOT change this. You can capture the onprem.agent Version in the “Loaded image” field when you download the Infoblox Docker image. Note that only Docker image version 19.03.5 or greater supports the join token option.

    To be fully compatible with the BloxOne services, you must update the Docker daemon settings and set the log driver to "json-file." For more information, refer to the Docker documentation at

  8. You can verify that the Infoblox Docker container images are properly deployed on the system by using the following command:
    # docker ps
  9. You have now successfully deployed on-prem Host. It might take a couple minutes for the proxy and BloxOne Threat Defense Cloud to connect. Once connected, the host starts collecting information from your on-prem devices and transmits the data to BloxOne Threat Defense Cloud.
  10. To check the current status of the proxy, you can go to Manage -> On-Prem Hosts in the Cloud Services Portal. For more information about the host status see Viewing On-Prem Host Status.

  • No labels

This page has no comments.