Calculations for the Central Node component deployed on the KVM virtualization platform
September 6, 2024
ID 265697
To deploy the Central Node component in a virtual infrastructure, you must install the KVM hypervisor based on the Debian GNU/Linux 12 operating system using the QEMU 8.0.2 emulator.
When deploying the Central Node component in a virtual infrastructure, you must keep in mind the following limitations:
- It is possible to install the application with the installation files of the Ubuntu operating system only.
- Only the non-high-availability version of the application can be installed.
- You can only use the Sensor component deployed on the same server as the Central Node component.
- You can only connect a Sandbox component deployed outside the KVM virtualization platform on a physical server or on another supported virtualization platform.
- For each Central Node server deployed in a virtual infrastructure, a separate network interface must be used for receiving mirrored SPAN traffic.
- You cannot use the API to inform external systems about alerts generated by the application or the API for informing external systems about application events.
- Support for KVM virtualizations used in cloud solutions is not guaranteed.
- In the virtual machine settings, the host value must be set for the type parameter in the CPU settings and the VMware vmxnet3 value for the model parameter in the network adapter settings.
The hardware requirements for the Central Node server depending on the functionality being used are listed in the table below.
Hardware requirements of the Central Node server when using KEDR functionality
Maximum number of hosts with the Endpoint Agent component | Maximum number of email messages per minute | Maximum volume of traffic from SPAN ports on the server with the Central Node component (Mbps) | Minimum number of logical cores at 3 GHz | Minimum RAM (GB) |
|---|---|---|---|---|
50 | 0 | 0 | 4 | 20 |
100 | 0 | 0 | 4 | 20 |
150 | 0 | 0 | 4 | 20 |
250 | 0 | 0 | 6 | 22 |
500 | 0 | 0 | 6 | 24 |
750 | 0 | 0 | 6 | 26 |
Hardware requirements of the Central Node server when using KATA and KEDR functionality
Maximum number of hosts with the Endpoint Agent component | Maximum number of email messages per minute | Maximum volume of traffic from SPAN ports on the server with the Central Node component (Mbps) | Minimum number of logical cores at 3 GHz | Minimum RAM (GB) |
|---|---|---|---|---|
100 | 1 | 20 | 6 | 26 |
250 | 5 | 50 | 6 | 28 |
500 | 30 | 100 | 10 | 31 |
750 | 30 | 100 | 12 | 31 |
