Understanding the Architecture

The architecture for the Trino Data Warehouse Protector is depicted in the image below.

ComponentDescription
RPAgentIs a daemon running on each node that downloads the policy package from the ESA over a TLS channel using the installed Certificates.
Log ForwarderIs a daemon running on each node that routes the audit logs and application logs to the ESA/Audit Store.
config.iniIs a file on each node containing the set of configuration parameters to modify the protector behavior.
Protector LayerContains the Trino Protector UDFs and APIs.
JcoreLiteIs the JNI library that provides a Java API layer to the Core libraries.
CoreIs the set of various libraries that provide the Protegrity Core functionality.

Last modified : December 18, 2025