Articles in this section

Install SkyFormation Platform Prerequisites

Avatar
Nadav Lavy
  • Updated
Follow

Overview

This document details the prerequisites to deploy the SkyFormation platform before any of the SkyFormation modules could be added. Any of the available SkyFormation module as its own prerequisites detailed in addition.

The prerequisites detailed below are separated into 3 different sections:

  • Hardware/Software
    Hardware or software components/libraries needed to run the SkyFormation module/component
    on its dedicated VM
    e.g. OS version, Java Run-time installed
  • Network security rules
    Network connectivity requirements to or from the SkyFormation machine and processes
    e.g. HTTPS from SkyFormation machine to update.skyformation.net
  • Applicative
    Any information or setting needed to run or add the SkyFormation modules.
    e.g. cloud application credentials, cloud app authorization settings, cloud app license.

SkyFormation Platform Prerequisites

Category

Name

Details

 

Hardware/Software

 

 

CPU

2 Core (4 recommended)

RAM

16GB minimal

Disk space

512GB minimal

Mounted to either:
/opt/exabeam/data/sk4 in case cloud connectors is installed on an Exabeam server (-d=exabeam set during deployment).

OR

/var/lib/docker/volumes otherwise


In both cases, make sure that /var/lib/docker has at least 20GB mounted to it for miscellaneous docker data. 

Operating systems supported

 Ubuntu 16.04 / 18.04 / 20.04,
RHEL/ CentOS 7.x

 

Docker & Docker Compose

 Docker and Docker Compose are installed during installation if they're not present on the host; To install manually, use Docker version >= 16.x, docker Compose >= 1.20 - latest versions of each is preferred

Network security rules - install and upgrade

SSL (port 443 and 8443) Outbound from SkyFormation machine to any internet address for the duration of the install only, OR whitelist the following URLs for the duration of the install/upgrade:

  • 498895000136.dkr.ecr.us-east-1.amazonaws.com
  • download.docker.com
  • download.skyformation.net
  • get.docker.com
  • license.skyformation.net
  • prod-us-east-1-starport-layer-bucket.s3.us-east-1.amazonaws.com
  • proxy.skyformation.net
  • www.docker.com

 

 

SkyFormation cloud service allows download of the SkyFormation software, deployment scripts, updates and more. Also it is used for the SkyFormation license activation. 

For docker links, SkyFormation installation/upgrade uses the these domains to retrieve and install the docker app on the machine (if outdated or missing) and the SkyFormation app docker images from its registry. 

An alternative is to have docker and docker-compose installed on the host
Network security rules - runtime

 

SSL (port 443) Outbound from SkyFormation machine to SkyFormation cloud services

we advise to also open:

for troubleshooting capabilities.

 This is needed for the SkyFormation Discover and SkyFormation cloud apps connectors modules.
 

CentOS only

HTTP (port 80) Outbound from SkyFormation machine to the Yum package manager URL

* If HTTP outbound is not permitted a reverse proxy could be used to proxy the the Yum package manager requests over SSL. 

Please see:

Configure CentOS package manager Yum to use reverse proxy

Note that the SkyFormation reverse proxy is only available if coordinated with the SkyFormation support team in advance. 

SkyFormation auto-install uses the Linux package manager to download the needed Linux packages for it to run. Once done this rule could be removed. 

Applicative

max number of open files should be 1000000

 See Increasing the maximum number of open files

 

 

Related articles

Comments

0 comments

Please sign in to leave a comment.