Overview
This document details the prerequisites to deploy the SkyFormation platform before any of the SkyFormation modules could be added. Any of the available SkyFormation module as its own prerequisites detailed in addition.
The prerequisites detailed below are separated into 3 different sections:
- Hardware/Software
Hardware or software components/libraries needed to run the SkyFormation module/component
on its dedicated VM
e.g. OS version, Java Run-time installed - Network security rules
Network connectivity requirements to or from the SkyFormation machine and processes
e.g. HTTPS from SkyFormation machine to update.skyformation.net - Applicative
Any information or setting needed to run or add the SkyFormation modules.
e.g. cloud application credentials, cloud app authorization settings, cloud app license.
SkyFormation Platform Prerequisites
|
Category |
Name |
Details |
|
Hardware/Software
|
CPU |
2 Core (4 recommended) |
|
RAM |
16GB minimal |
|
|
Disk space |
512GB minimal Mounted to : /opt/exabeam/data/sk4 in case cloud connectors is installed on an Exabeam server. /var/lib/docker/volumes in other cases In both cases, make sure that /var/lib/docker has at least 20GB mounted to it for miscellaneous docker data. |
|
|
Operating systems supported |
Ubuntu 16.04+, RHEL/ CentOS / 7.x | |
|
|
Docker & Docker Compose |
Docker and Docker Compose are installed during installation if they're not present on the host; To install manually, use Docker version >= 16.x, docker Compose >= 1.20 - latest versions of each is preferred |
|
Network security rules |
SSL (port 443) Outbound from SkyFormation machine to SkyFormation cloud services
download.skyformation.net skyformation-metadata.s3.amazonaws.com we advise to also open: s3.amazonaws.com/sk4-customers-logs for troubleshooting capabilities.
|
SkyFormation cloud service allows download of the SkyFormation software, deployment scripts, updates and more. Also it is used for the SkyFormation license activation. |
|
SSL (port 443 and 8443) Outbound from SkyFormation machine to any internet address for the duration of the install only |
This is needed for the SkyFormation Discover and SkyFormation cloud apps connectors modules. | |
|
CentOS only HTTP (port 80) Outbound from SkyFormation machine to the Yum package manager URL * If HTTP outbound is not permitted a reverse proxy could be used to proxy the the Yum package manager requests over SSL. Please see: Configure CentOS package manager Yum to use reverse proxy Note that the SkyFormation reverse proxy is only available if coordinated with the SkyFormation support team in advance. |
SkyFormation auto-install uses the Linux package manager to download the needed Linux packages for it to run. Once done this rule could be removed. |
|
|
For installation/Upgrade HTTP and HTTPS outbound from the SkyFormation machine to the Docker registry
|
SkyFormation installation/upgrade uses the these domains to retrieve and install the docker app on the machine (if outdated or missing) and the SkyFormation app docker images from its registry. An alternative is to have docker and docker-compose installed on the host |
|
|
Applicative |
max number of open files should be 1000000 |
Comments
0 comments
Please sign in to leave a comment.