rConfig Vector Overview: Distributed Network Configuration Management for Enterprise

rConfig Vector is the next generation of network configuration management, built for enterprises, Managed Service Providers (MSPs), and large-scale networks that require distributed, scalable, and secure backup solutions. With a multi-tiered centralized architecture and remote collector agents, Vector ensures seamless configuration backups from thousands of devices across different locations. Designed to provide high availability and multi-tenant management, rConfig Vector empowers organizations to streamline network compliance and disaster recovery strategies with ease.

Please take a look at our recent webinar on the Vector suite of products. This video includes information on Licensing, architecture and use cases.

Play

Key Features & Benefits

World-Class Enterprise Support Options: Comprehensive support packages tailored for businesses of all sizes, ensuring smooth operations and expert assistance.

Distributed Backup Architecture: Ensures reliable and redundant backups across multiple network locations.

Multi-Tiered Centralized Architecture: Supports scalable, high-performance operations with dedicated processing layers.

Remote Collector Agents: Lightweight and secure agents that collect and transmit device configurations.

Scalability & Performance: Handles thousands of devices efficiently with optimized resource utilization.

Security & Compliance: Offers encryption, access controls, and audit logging to meet enterprise security standards.

MSP & Multi-Tenancy Support: Provides a single pane of glass for managing multiple client networks and enforcing compliance.

rConfig Vector Architecture

rConfig Vector splits configuration management across dedicated layers so that collection, processing and control can each scale on their own. Agents collect configurations inside customer networks. Vector Servers process and store them. For the largest deployments, a Central Manager orchestrates inventory across many servers.

Most MSPs and enterprises run a two-tier deployment: one rConfig V8 Vector Server and its Vector Agents. Multi-country and very large estates add the Vector Central Manager as a third tier.

Figure 1: Multi-country Vector. Regional Vector Servers keep configuration data in-country, orchestrated centrally over RabbitMQ. Click the diagram to open it full size.

Figure 2: Single Vector Server. One hub for every customer network, suited to small and mid-size MSPs and single-region enterprises. Click the diagram to open it full size.

Note

The Vector Central Manager is only required for very large or multi-country deployments with multiple Vector Servers. These deployments are usually highly customised, so rConfig Professional Services assist with design, deployment and integration.

Architecture Layers

Control and Orchestration Layer (Vector Central Manager, optional): Central device and user management, and inventory orchestration across all Vector Servers. The Central Manager assigns each device to its home region and dispatches work to the right server. A RabbitMQ message broker carries jobs down to the regional servers and status back up, over AMQP with TLS.

Processing and Storage Layer (rConfig V8 Vector Server): Aggregates, processes and securely stores configuration data. The Vector Server orchestrates backup and change jobs through its agents and provides the full V8 Pro feature set, including compliance, reporting and notifications. In multi-country deployments each country runs its own Vector Server, so configurations, backups and change history stay inside that sovereign boundary.

Collection Layer (rConfig Vector Agent): Deployed on-premises or in cloud environments inside the customer network. Agents connect directly to network devices to collect configurations and apply changes.

Agent Connectivity

Vector Agents connect to their Vector Server in one of two ways. Both modes support scheduled backups and configuration changes on end customer devices, and a single Vector Server can mix both across its customers.

Secure unidirectional (internet): The agent opens an outbound, encrypted connection to its Vector Server. No inbound firewall rules are required at the customer edge, which makes this the simplest option for MSPs onboarding new customers.

Bidirectional (VPN, MPLS or private WAN): Where the Vector Server has a routed path into the customer network, the server can also initiate sessions. This adds hub-initiated capabilities:

• Real-time backups triggered from the hub
• Live interrogation of devices
• Proxy jump from the hub through the agent to end devices

Note

The Vector Agent needs only outbound access to operate. Bidirectional connectivity is optional and adds hub-initiated features on top of the core backup and change capability.

How Data Flows Through Vector

1. The Vector Agent collects configurations from network devices over direct SSH connections.
2. The agent sends the data securely to its assigned Vector Server, over an outbound internet connection or a VPN or MPLS link.
3. The Vector Server stores the configurations and processes them for notifications, reports and compliance. Users manage backups, review configurations and apply changes from the server.
4. Over a bidirectional link, the Vector Server can also start real-time backups, interrogate devices and proxy jump to them through the agent.
5. In multi-country deployments, the Vector Central Manager orchestrates device inventory and policy across all Vector Servers through RabbitMQ. Only orchestration data and job messages cross regions. Configuration data stays with the regional Vector Server.

Deployment Models

Vector fits networks of any size, from a single site to a global estate.

Single Vector Server (Figure 1): One Vector Server with agents in each site or customer network. The standard model for enterprises with centralised IT and for small and mid-size MSPs.

MSP and Multi-Tenant: One Vector Server hosted in the MSP data centre or cloud, with an agent in each customer network. Backups are kept per customer, access control is isolated, and internet and VPN customers can sit side by side.

Multi-Country and Data Sovereignty (Figure 2): One Vector Server per country or region, with the Vector Central Manager providing global inventory, users and orchestration. Suited to global enterprises and MSPs with data residency obligations.

Licensing & Subscription Models

rConfig Vector offers a straightforward and scalable licensing model designed to accommodate networks of all sizes. Whether managing a few hundred devices or scaling to enterprise-grade deployments, Vector provides predictable pricing and flexibility to meet your needs.

Licensing is solely based on the number of devices under management. For larger deployments, particularly those leveraging Vector Central Manager (CM), professional services are required for deployment, setup, and integration with existing systems.

Subscription-Based Licensing: Flexible annual and multi-year licensing options.

Device-Based Tiers: Pricing scales based on the number of managed network devices.

MSP Licensing Model: Designed for service providers managing multiple client infrastructures.

Enterprise Licensing: Custom agreements available for large-scale enterprise deployments.

Trial & Evaluation Options: Organizations can test rConfig Vector through trial licenses before full deployment.

Integration & Extensibility

rConfig Vector is designed to seamlessly integrate into enterprise ecosystems, providing robust connectivity and automation. With an API-first approach and a distributed enterprise queuing system across the first two tiers, Vector ensures efficient data processing, workload distribution, and optimal backup execution at scale.

API-First Approach: Integrates seamlessly with third-party tools such as SIEM, ITSM, and CMDB platforms.

All rConfig professional features available across the entire architecture: Ensures seamless access to advanced functionality throughout the deployment.

Customization & Extensibility: Allows organizations to tailor Vector’s features to meet unique business requirements.

Security

Security is essential. Robust security measures are incorporated into rConfig Vector to ensure world-class protection for critical assets. As of 2025, rConfig is classified as a Critical Class 1 application under the EU Cyber Resilience Act, ensuring compliance and security best practices for your peace of mind.

Key Security Features

100% On-Premise Deployment: rConfig Vector is fully deployable on-premise with no external dependencies, ensuring total control over your infrastructure.

No External Access: rConfig has no access to your data or systems unless explicitly permitted by the organization.

Robust Layer 3 - Layer 7 Security: Vector incorporates multiple security layers, from network segmentation to application-level defenses, protecting against unauthorized access and cyber threats.

Encryption & Compliance: Built-in encryption mechanisms ensure data integrity and compliance with regulatory standards.

Auditing & Access Controls: Granular user permissions and audit logs provide full visibility into system interactions.

Summary & Next Steps

rConfig Vector is the ultimate scalable, secure, and distributed configuration backup solution designed for enterprises and MSPs. With multi-tiered architecture, remote collectors, and robust security, Vector provides high availability and disaster recovery-ready backups for networks of any size.

Explore the Documentation: Learn how to deploy, configure, and integrate rConfig Vector for your environment.

Related Documentation

• Vector Server Installation - Deploy Vector Server infrastructure
• Vector Agent Installation - Install and configure remote agents
• Vector Central Manager - Enterprise-scale centralized management
• Vector Licensing - Understanding licensing models and activation