General

What are the requirements for Relay Rocket?
Ubuntu 18.04 Server x64 with all current updates, on a VM or physical machine
Current Server Recommendations: Intel Xeon (or equivalent), 2.1Ghz Processor, 4GB RAM, 40GB Disk Space, 1 Network Interface

Why should I use Relay Rocket?
If you need to filter BYOD, guest, IoT, Android, or other devices without a Smart Agent installed, the Relay Rocket provides filtering and reports for all that traffic.

Why don’t I see Relay Rocket under Settings in Relay?
You may need a license. Contact sales@lightspeedsystems.com

Why do I see the following error when running the install command?
If you see the following error on the output after running the install command
E: Unable to locate package relay-rocket
The issue is likely you are running Ubuntu 18.04 32-bit, and not 64-bit. To check the Architecture of the OS run the following on the SSH Shell:

dpkg --print-architecture

Why would I switch from the old Rocket to Relay Rocket?
With Relay Rocket, you won’t have to manage two interfaces. All policies and reports come from Relay.

Is it better to reuse the Rocket appliance or to install Ubuntu in a VMware environment?
This is up to personal preference. Best practice would be to use Virtual Machines, they are a great way to save rack space and hardware. You can reuse the Rocket Appliance; however, you will need to install Ubuntu 18.04 over the existing OS.

I thought inline filtering was better than DNS.
Many DNS filters have shortcomings, like no user authentication and limited policies and reporting. Relay Rocket overcomes those challenges with more powerful features. When used in conjunction with Smart Agents installed on school-owned devices, you get the best of both worlds.

Ready to implement your Relay Rocket?
We have you covered with our Implementation Track. Click Here to get started!

DNS

Does the Linux box have to be the first in line for DNS?
Yes. The client points to Relay for first DNS, then the Relay Rocket will hit your internal DNS.

Do relay-autodetect.lsfilter.com A record needs to be created for each Relay Rocket, if a device is running Relay Smart Agents?
Yes, if a device that is running the Relay Smart Agent and is on the same network as a Relay Rocket, you will need to have this set up.

If I run Relay Rocket and have Smart Agents on school devices, won’t they get double-filtered?
No, as long as relay-autodetect.lsfilter.com A record is created, then Relay Rockets see when traffic is coming from a device with a Smart Agent installed and ignores it so the Smart Agent can filter that traffic.

Can we assign multiple DDNS servers?
Yes, when you are creating the Relay Rocket within Relay, there is a section where you can input multiple DDNS servers.

Hardware

Why would I switch from the old Rocket to Relay Rocket?
With Relay Rocket, you won’t have to manage two interfaces. All policies and reports come from Relay.

Is Relay Rocket an appliance you will ship to me?
No, it’s a software package you can download and installed on a Ubuntu 18.04 Server

Who sets up the Linux server?
The server can be built by anyone, you can use our Implementation Track which will guide you through building a Linux server.


Networking

If we are using Relay Rocket as our primary DNS, what happens if it goes offline?
Traffic will stop resolving just as any on-premise DNS server. We recommend that you build a backup server for every Relay Rocket deployed on your network(s).

Is it advisable to use it for a catch-all in case there is a device that missed the agent through SMS/GPO?
Yes, make sure that the DHCP scope has the Relay Rocket IP address(es) set for their DNS.

If a student is able to change the DNS on their device does that bypass the Relay Rocket?
Yes; however, your firewall should stop the access from reaching outside of your network, by blocking any outbound traffic using port 53.

Does Relay Rocket support multi VLANs?
Yes they need to multicast-enabled between the Relay Rockets

We send RADIUS accounting to the rocket parent for our "cluster" of rockets. Is there a single "parent" for groups of relay rockets?
No. If you point your RADIUS accounting packets to one of the RR, they will share the authentication information via the Multicast with one another.

Software

How does Relay Rocket handle encrypted traffic? Does that still require an agent?
Not currently because it's made for BYOD IoT traffic. Decryption is handled by the SA

Can I use captive portal/user authentication with Relay Rocket?
Yes. Relay Rocket support authentication through Google, Active Directory, or O365.

Does the Relay Rocket work with the Custom Allow/Block lists?
Yes

Do MAC Addresses show up in reports for the BYOD if you don't set up authentication?
No, Relay does not report MAC Addresses.

How long will changes in the Relay interface take to go into effect on Relay Rocket?
Changes take effect on Relay Rocket within 5 minutes after a change has been made in Relay.

Did this answer your question?