Projects
Each project can be used independently. Deploy only the capabilities you need.Data Relay Link and Data Relay Control are different products. Data Relay Link handles secure connectivity: remote access into private systems and controlled egress out of restricted networks. Data Relay Control handles enterprise data-flow processing, governance, and delivery. Control is not a centralized manager for Link.
Core projects
Data Relay Link
Lightweight secure-connectivity gateway for small environments. It publishes selected SSH, HTTP, HTTPS, or custom TCP services from systems behind NAT/firewalls and also provides agentless Controlled Egress to approved Internet destinations through HTTP/HTTPS proxy policy.Product:
Source:
link.datarelay.runSource:
datarelay-labs/datarelay-linkDP Ubuntu Upgrade Mirror Manager
Prepares one Ubuntu 24.04 mirror server and uses it to drive controlled Stellar Cyber DP upgrades from Ubuntu 16.04 through 24.04, followed by DP 6.6.0 Phase 2 bringup. DP hosts can work from the local HTTP mirror without direct access to external artifact sources.Product:
Source:
dpos.xdr.oooSource:
xdr-labs/ubuntu-mirror-automationData Relay Control
Enterprise Data Control Gateway built around One Stream → Many Routes → Many Destinations. Streams own source execution and progress; Routes apply destination-specific Transform, optional Protection/Policy, and delivery controls. The current product supports governance, audit, quarantine, replay, backup, and delivery history.Product:
Source:
control.datarelay.runSource:
datarelay-labs/datarelay-controlDetection Scenario Platform (DSP)
Runs controlled security scenarios for XDR/NDR customer POC validation. It records the activity it generated in the Event Store so engineers can compare that record with XDR/NDR detections. Local and remote webshell execution are supported where documented.Product:
Source:
dsp.xdr.oooSource:
xdr-labs/xdr-poc-scriptDeployment & appliance operations
OpenXDR KVM Installer
Automates KVM host preparation and VM deployment for Stellar Cyber Data Processor, Sensor, high-performance Sensor, and AIO + Sensor configurations. It covers hardware detection, networking, KVM/libvirt, storage, SR-IOV/PCI passthrough, and resumable deployment workflows.
Stellar Appliance CLI
Unified
aella_cli interface for KVM hosts created by the deployment tooling. It manages network settings, DNS/NTPsec, ACLs, host information, services, VM console/autostart, patching, and related appliance operations.Lab & integration utilities
XDR Lab Appliance
Self-contained XDR/NDR lab built on Ubuntu 24.04, KVM, and Open vSwitch. It runs a Stellar Sensor with Linux and Windows test targets, mirrors lab traffic, provides predictable reverse-NAT access, and can be rebuilt from configuration.
Stellar Data Exporter
Browser-based raw-data query and export utility for Stellar Cyber. It supports Root Scope and User Scope credentials, multi-source query, Preview, CSV/JSON/NDJSON output, browser download, S3-compatible storage, SFTP, file splitting, progress, and resumable remote export workflows.Guide:
xdr.ooo/products/stellar-data-exporter-guide · Source: xdr-labs/stellar-data-exporterStellar Alert & Case Relay
Lightweight Python relay for organizations that want Stellar Cyber alerts and cases delivered into an existing SIEM or SOC portal. It polls the Stellar Cyber API and forwards newline-delimited JSON over TCP with independent Alert/Case streams, checkpointing, retry/recovery, backfill, and separate destinations.Product:
Source:
stellar-relay.xdr.oooSource:
xdr-labs/Stellar-Case-Alert-to-SylogSee project relationships and links
View the overall project map and jump to product pages or source repositories.