Skip to main content

Enterprise OPA Introduction

Enterprise OPA is an enterprise-grade drop-in replacement for the Open Policy Agent (OPA) that offers:

  • Datasource integrations: Connect quickly to your Kafka, LDAP, DynamoDB, S3, SQL database, MongoDB and Vault without needing to write or manage your own plugins.
  • Secrets manager integration: Connect to HashiCorp Vault to securely use http.send.
  • Logging integrations: Send your authorization decision logs to Splunk or Kafka.
  • Live impact analysis: Check to see if your new policies impact production before they are merged.
  • Lower costs: Use cheaper cloud infrastructure because Enterprise OPA uses 10x less memory and 40% less CPU than OPA.

Hello World

See the performance improvements for yourself​

The following commands are used to try Enterprise OPA.

  1. brew install styrainc/packages/eopa
  2. eopa license trial
  3. export EOPA_LICENSE_KEY=<your license key>
  4. eopa run -s https://dl.styra.com/enterprise-opa/bundle-enterprise-opa-400.tar.gz
  5. curl 'http://localhost:8181/metrics/alloc_bytes?pretty=true'

The following commands compare Enterprise OPA with OPA.

  1. opa run -s -a localhost:8282 https://dl.styra.com/enterprise-opa/bundle-opa-400.tar.gz
  2. curl 'http://localhost:8282/metrics/alloc_bytes?pretty=true'
note

Memory usage for both Enterprise OPA and OPA peaks at launch. Wait a short time before checking the metrics to see typical operational figures.

Next steps​