Skip to main content

Getting Started with the Illumio Console

What's New in Illumio Console 26.10.1

There is one new property in the API optional_features_put named policy_perspective_externalization, which was added to centralize the policy perspective cache in cloud blob storage. It centralizes the policy perspective cache in cloud blob storage, allowing one PCE node to compute the perspective while all other nodes retrieve the pre‑computed version.

This model reduces redundant CPU‑intensive computation, lowers resource usage across the cluster, and ensures consistent policy delivery from a shared cached source.

About the property policy_perspective_externalization

The property is aligned with its key objectives:

Eliminate Redundant Computation

  • Only one PCE node computes the policy perspective.

  • All other nodes retrieve the cached version from blob storage.

  • The design removes duplicate CPU‑intensive calculations across the cluster.

Enable Cross‑Node Cache Sharing

  • The policy perspective cache lives in centralized cloud storage.

  • All PCE nodes can retrieve the same cached perspective regardless of where it was computed.

Configuration Settings

  • Azure BlobStore Settings

    Policy Perspective Externalization Global Configuration

      global:
            runtime_env:
              policy_perspective:
  		storage_type: cloud
  		storage:
    		instance_type: azure_blob
    		auth_mode: credentials
    		endpoint: https://<blobname>.blob.core.windows.net/
     		bucket: <container_name>
		path_prefix: <pce_fqdn>
    		transfer_ttl: 30 
                credentials:
      			access_key_id: <blob_name>
      			access_key_secret: <path_to_secret>

  • AWS S3 Settings

    Policy Perspective Externalization Global Configuration

    global:
        runtime_env:
        policy_perspective:
  	   storage_type: cloud
           cloud_storage:
                instance_type: 'aws_s3'
                auth_mode: 'credentials'
                endpoint: 'https://s3-us-west-1.amazonaws.com'
                region: 'us-west-1'
                bucket: <bucket_name>
 		path_prefix: <pce_fqdn> 
                transfer_ttl: 30
                credentials:
                  	ccess_key_id: <s3_name>
                  	access_key_secret: <path_to_secret>