samply/focus Docker 镜像 - 轩辕镜像

Focus

镜像概述和主要用途

Focus是Samply的站点组件，运行于***IT环境中，负责将Beam.Proxy的任务分发至本地应用，并通过Samply.Beam回传结果。支持指定Blaze和SQL查询进行缓存以加速检索，缓存结果24小时后过期。

核心功能和特性

• 任务分发与结果传输：接收Beam.Proxy任务并分发给本地应用，将执行结果通过Beam回传
• 查询缓存：支持缓存Blaze和SQL查询结果，提升重复查询效率
• 结果混淆：可对查询结果进行混淆处理，保护敏感数据，支持按项目例外配置
• 多端点支持：兼容Blaze、OMOP、SQL、EUCAIM API等多种端点类型
• 灵活部署：可集成于Samply.Bridgehead或独立部署，支持Docker容器化运行

使用场景和适用范围

• IT环境集成：作为Samply.Bridgehead的组成部分，用于部署、维护和监控IT环境中的应用
• 独立任务处理：需连接Beam.Proxy和Blaze FHIR存储的场景，处理分布式查询任务
• 数据隐私保护：需对***数据查询结果进行混淆处理的合规场景

安装方法

Samply/Bridgehead集成

Focus已包含在Samply.Bridgehead部署中，Bridgehead是***IT环境中部署、维护和监控应用的一站式解决方案。

独立安装

独立运行Focus需至少一个运行中的Samply.Beam.Proxy和Samply.Blaze FHIR存储。推荐使用预编译Docker镜像：

bash
docker run --rm -e BEAM_PROXY_URL=http://localhost:8081 -e ENDPOINT_URL=http://localhost:8089/fhir/ -e PROXY_ID=proxy1.broker -e API_KEY=App1Secret -e BEAM_APP_ID_LONG=app1.broker.example.com samply/focus:latest

配置说明

必选环境变量

以下环境变量为运行Focus的必填项，若自行编译运行，也可通过命令行参数提供（详见focus --help）：

bash
BEAM_PROXY_URL = "http://localhost:8081"  # Beam.Proxy的URL
ENDPOINT_URL = "http://localhost:8089/fhir/"  # 端点URL（如Blaze FHIR存储）
PROXY_ID = "proxy1.broker"  # 代理ID
API_KEY = "App1Secret"  # API密钥
BEAM_APP_ID_LONG = "app1.broker.example.com"  # Beam应用的长ID

可选环境变量

bash
RETRY_COUNT = "32"  # Beam和Blaze健康检查的最大重试次数，默认值：32
ENDPOINT_TYPE = "blaze"  # 端点类型，允许值："blaze"、"omop"、"sql"、"blaze-and-sql"、"eucaim-api"，默认值："blaze"
EXPORTER_URL = "[***]"  # 导出器URL
OBFUSCATE = "yes"  # 是否混淆结果（总开关），允许值："yes"、"no"，默认值："yes"
OBFUSCATE_BELOW_10_MODE = "1"  # 小于10的值的混淆模式：0-返回0，1-返回10，2-使用拉普拉斯分布混淆并取整，默认值：1（OBFUSCATE为"no"时无效）
DELTA_PATIENT = "1."  # Patient分层器计数混淆的敏感度参数，默认值：1（OBFUSCATE为"no"时无效）
DELTA_SPECIMEN = "20."  # Specimen分层器计数混淆的敏感度参数，默认值：20（OBFUSCATE为"no"时无效）
DELTA_DIAGNOSIS = "3."  # Diagnosis分层器计数混淆的敏感度参数，默认值：3（OBFUSCATE为"no"时无效）
DELTA_PROCEDURES = "1.7"  # Procedures分层器计数混淆的敏感度参数，默认值：1.7（OBFUSCATE为"no"时无效）
DELTA_MEDICATION_STATEMENTS = "2.1"  # Medication Statements分层器计数混淆的敏感度参数，默认值：2.1（OBFUSCATE为"no"时无效）
DELTA_HISTO = "20."  # Histo分层器计数混淆的敏感度参数，默认值：20（OBFUSCATE为"no"时无效）
EPSILON = "0.28"  # 分层器计数混淆的隐私预算参数，默认值：0.28（OBFUSCATE为"no"时无效）
ROUNDING_STEP = "10"  # 混淆值的取整粒度，默认值：10（OBFUSCATE为"no"时无效）
PROJECTS_NO_OBFUSCATION = "exliquid;dktk_supervisors;exporter;ehds2"  # 无需混淆结果的项目，用";"分隔，默认值："exliquid;dktk_supervisors;exporter;ehds2"
QUERIES_TO_CACHE = "queries_to_cache.conf"  # 包含base64编码CQL查询和SQL查询别名的文件路径，未设置则不缓存结果
PROVIDER = "name"  # EUCAIM提供者名称
PROVIDER_ICON = "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAAA1BMVEUAAACnej3aAAAAAXRSTlMAQObYZgAAAApJREFUCNdjYAAAAAIAAeIhvDMAAAAASUVORK5CYII="  #  base64编码的EUCAIM提供者PNG图标
AUTH_HEADER = "[Auth Type] XXXX"  # 访问存储的授权头，如"ApiKey XXXX"、"Basic XXXX"
EXPORTER_API_KEY = "XXXX"  # 访问Exporter应用的x-api-key头值

Postgres查询配置

使用Postgres查询需使用带"dktk"特性的Docker镜像，并设置以下可选变量：

bash
POSTGRES_CONNECTION_STRING = "postgresql://postgres:Test.123@localhost:5432/postgres"  # Postgres连接字符串
MAX_DB_ATTEMPTS = "8"  # 数据库连接的最大尝试次数，默认值：8

其他配置

• 零计数混淆默认关闭，设置OBFUSCATE_ZERO环境变量可启用
• 通过TLS_CA_CERTIFICATES_DIR添加额外可信证书（如TLS终止代理场景）
• 支持HTTP_PROXY、HTTPS_PROXY、ALL_PROXY、NO_PROXY及其小写形式的代理配置
• 通过RUST_LOG环境变量设置日志级别

使用示例

创建健康检查任务

bash
curl -v -X POST -H "Content-Type: application/json" --data '{"id":"7fffefff-ffef-fcff-feef-feffffffffff","from":"app1.proxy1.broker","to":["app1.proxy1.broker"],"ttl":"10s","failure_strategy":{"retry":{"backoff_millisecs":1000,"max_tries":5}},"metadata":{"project":"focus-healthcheck"},"body":"wie geht es"}' -H "Authorization: ApiKey app1.proxy1.broker App1Secret" http://localhost:8081/v1/tasks

创建Blaze查询任务

bash
curl -v -X POST -H "Content-Type: application/json" --data '{"id":"7fffefff-ffef-fcff-feef-fefbffffeeff","from":"app1.proxy1.broker","to":["app1.proxy1.broker"],"ttl":"10s","failure_strategy":{"retry":{"backoff_millisecs":1000,"max_tries":5}},"metadata":{"project":"exliquid"},"body":"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***YSI6IHsKCQkJCQkJCSJleHByZXNzaW9uIjogIkluSW5pdGlhbFBvcHVsYXRpb24iLAoJCQkJCQkJImxhbmd1YWdlIjogInRleHQvY3FsLWlkZW50aWZpZXIiCgkJCQkJCX0KCQkJCQl9CgkJCQldLAoJCQkJInN0cmF0aWZpZXIiOiBbCgkJCQkJewoJCQkJCQkiY29kZSI6IHsKCQkJCQkJCSJ0ZXh0IjogIkdlbmRlciIKCQkJCQkJfSwKCQkJCQkJImNyaXRlcmlhIjogewoJCQkJCQkJImV4cHJlc3Npb24iOiAiR2VuZGVyIiwKCQkJCQkJCSJsYW5ndWFnZSI6ICJ0ZXh0L2NxbCIKCQkJCQkJfQoJCQkJCX0sCgkJCQkJewoJCQkJCQkiY29kZSI6IHsKCQkJCQkJCSJ0ZXh0IjogIkFnZSIKCQkJCQkJfSwKCQkJCQkJImNyaXRlcmlhIjogewoJCQkJCQkJImV4cHJlc3Npb24iOiAiQWdlQ2xhc3MiLAoJCQkJCQkJImxhbmd1YWdlIjogInRleHQvY3FsIgoJCQkJCQl9CgkJCQkJfSwKCQkJCQl7CgkJCQkJCSJjb2RlIjogewoJCQkJCQkJInRleHQiOiAiQ3VzdG9kaWFuIgoJCQkJCQl9LAoJCQkJCQkiY3JpdGVyaWEiOiB7CgkJCQkJCQkiZXhwcmVzc2lvbiI6ICJDdXN0b2RpYW4iLAoJCQkJCQkJImxhbmd1YWdlIjogInRleHQvY3FsIgoJCQkJCQl9CgkJCQkJfQoJCQkJXQoJCQl9LAoJCQl7CgkJCQkiY29kZSI6IHsKCQkJCQkidGV4dCI6ICJkaWFnbm9zaXMiCgkJCQl9LAoJCQkJImV4dGVuc2lvbiI6IFsKCQkJCQl7CgkJCQkJCSJ1cmwiOiAiaHR0cDovL2hsNy5vcmcvZmhpci91cy9jcWZtZWFzdXJlcy9TdHJ1Y3R1cmVEZWZpbml0aW9uL2NxZm0tcG9wdWxhdGlvbkJhc2lzIiwKCQkJCQkJInZhbHVlQ29kZSI6ICJDb25kaXRpb24iCgkJCQkJfQoJCQkJXSwKCQkJCSJwb3B1bGF0aW9uIjogWwoJCQkJCXsKCQkJCQkJImNvZGUiOiB7CgkJCQkJCQkiY29kaW5nIjogWwoJCQkJCQkJCXsKCQkJCQkJCQkJImN