How the Platform Is Actually Built
Two sub-platforms, one open-source foundation, and no third-party proprietary code. This page is the technical answer for the people who will have to operate and audit the system.
Architecture
Two Layers, on Kubernetes
IREX is a cloud-native aggregation of microservices organized into two sub-platforms. The secure cloud layer runs the data services on 100% open-source software: Cassandra for raw video, Redis for channel status and session cache, Kafka as the message broker between microservices, S3 object storage for snapshots and video chunks, and PostgreSQL for relational data.
The smart-city layer runs the processing on Kubernetes: the per-channel video-analytics modules, the HTTP gateway, the event dispatcher, the face and plate matchers, event search, alarm monitors, authentication, licensing, and PTZ control. Kubernetes provides self-recovery, load balancing, and automatic container migration when a node fails.
An optional edge architecture moves analytics close to the cameras at remote sites, so only events travel to the cloud rather than raw video, with offline recording and automatic event synchronization after the network recovers.
The Pipeline
What Happens to a Camera Stream
- 01
Ingest and Analyze
A per-camera analytics module ingests the stream, runs the analytics, and generates events with snapshots.
- 02
Dispatch and Persist
The event interface publishes messages to Kafka and records video chunks to Cassandra; downstream streamers persist full events and event metadata.
- 03
Extract and Match
Dedicated neural-network services extract face descriptors, detect appearance features, and match detections against the enrolled face and plate databases.
- 04
Index for Search
Proprietary descriptor clustering and indexing makes billions of face, figure, and vehicle objects searchable in seconds.
- 05
Export and Audit
Events flow continuously to dashboards, and every high-risk action is written to the append-only audit log against its Case ID.
Availability
The Three Availability Guarantees
- 100% of system components are hot-swappable, with no single point of failure. Any server, disk, switch, edge node, or analytics worker can fail or be replaced under load without operator-visible downtime.
- 100% high-load design, with linear scalability across every dimension. Cameras, users, retention period, and active AI modules each scale independently. Doubling one is an operational change, adding nodes, not an architectural one.
- 100% of platform components monitored 24/7 by the IREX network operations team, on IREX-hosted SaaS and on user-hosted deployments under Premier Support.
- Storage is triple-replicated with automatic failover, so an individual server or drive failing does not cost you a case.
Facts
- Inference
- Two interchangeable pipelines: a proprietary CPU framework (Synet) and an NVIDIA CUDA GPU pipeline. Hardware-agnostic; the mix is sized per deployment by IREX engineering.
- Model Governance
- Every model in the platform is governed by the public AI Model Governance Policy: dataset provenance from four permitted sources, human-reviewed labels, evaluation and bias testing before release, artifact integrity from training run to deployment, and foundation models used as published, pinned by version and checksum and served only inside the instance.
- Network
- A Leaf-Spine fabric for predictable low-latency communication across the cluster.
- Proven Scale
- 100,000+ cameras on one instance, all running real-time analytics with 30-day instant search.
- Architectural Ceiling
- 1,000,000 cameras, 100,000 users, and a one-year retention period without architectural change.
FAQ
What is the stack, exactly?
Entirely open-source technologies: Kubernetes, Ceph distributed storage, Cassandra, Kafka, PostgreSQL, Elasticsearch, and Apache Spark, on a Leaf-Spine network fabric. No third-party proprietary code is required, which is what makes source review and escrow realistic.
Do we need GPUs?
Not necessarily. Inference runs on two interchangeable pipelines, a proprietary CPU framework and an NVIDIA CUDA GPU pipeline. The platform is hardware-agnostic and IREX engineering sizes the CPU and GPU mix per deployment against camera count, retention, AI workload, and your existing server inventory.
Does multi-agency access work on one deployment?
Yes. The architecture is carrier-grade and multi-tenant with hierarchical role-based access control. Users sit in a hierarchical catalog of groups, each group is granted specific cameras, watchlists, locations, venues, and monitors, and a user can hold a different role in each group. Six roles run from Viewer to System Manager.
How are releases rolled out?
Versioning is MAJOR.MINOR and per-version release notes are published in the platform documentation. Rollout is a managed procedure: IREX DevOps notifies your counterpart of the contents and implications, both sides agree the window, users are warned, and the documented functionality tests are repeated afterwards. Upgrades need no action on the client side.
Send Your Architects
Technical due diligence is welcome, including source review and escrow arrangements for sovereign customers.