Skip to content
RhodeCode
← All customer stories
Defence · air-gapped

Installed on a network with no route out

A classified programme needed modern code review without any component that opens an outbound connection.

Offline install — rcstack --offline init, with no internet access
Fig. 03 Offline install — rcstack --offline init, with no internet access
Air-gap exceptions
0
Install
Offline
Telemetry
None
02.1Challenge

Every candidate failed the same question.

Procurement had one disqualifying question for every vendor: can any component initiate an outbound connection — for licensing, updates, analytics, anything.

Most answered that telemetry could be disabled. That is a different answer from cannot, and on this network the difference is the whole decision.

02.2Approach

Offline bundle, licence enforced locally.

RCstack installs from a complete offline image set with no registry access, and the licence validates against a local key rather than a callback.

Upgrades are carried in on removable media and applied with one command. IP binding then partitions access inside the enclave itself.

We could not find another platform that would install at all on a network like ours.
Engineering lead · name withheld
02.3Results

Modern review inside the perimeter.

Measured afterwards
  1. 00No route to the internet, and no exception requested for one
  2. 01Fully offline install and upgrade path
  3. 02Licence enforced locally, with no vendor callback
  4. 03IP binding used to partition access within the enclave

Pull requests, reviewer rules and code search run on the classified side with no exception granted and no compensating control to document.

Would this approach fit your organisation?

Bring your repository count, your VCS mix and your compliance constraints. We will tell you honestly whether a staged migration is the right answer for you — sometimes it is not.

Bring
repository count, VCS mix, seat count
Constraints
regulator, classification, contract
We answer
within 24 hours, by an engineer
Contact
sales@rhodecode.com