Content Comparison

EDC + DDC + DSPM

CPU

8 cores

16 cores

20 cores

⚠️ The CPU must support the instructions SSE4.1, SSE4.2, AVX, AVX2, FMA.

Only x86_64 architecture is supported. Minimum CPU speed is 2.2 GHz

Memory

32GB

64GB

80GB

Storage

500GB

Min available inodes for ext4: 32M

600GB

Min available inodes for ext4: 39M

700GB

Min available inodes for ext4: 45M

Storage details

• only SSD storage is supported

• SWAP must be disabled

• / rootrequires at least 20GB

  /var requires at least 20GB

  /var/lib/rancher requires at least 500GB (in case of EDC, use the correct disk space according to the type of deployment shown above).

1. if neither /var nor /var/lib/rancher is specifically assigned to a partition you must assign the full 500GB to root

2. if /var is specifically assign to a partition but /var/lib/rancher is not, then you must assign the 500GB to /var

3. if /var/lib/rancher is specifically assign to a partition but /var is not, then you must assign the 500GB to /var/lib/rancher

Operating System

Ubuntu 20.04 LTS Server is recommended, other supported operating systems include:

• Ubuntu 22.04, 24.04

• RHEL 8.8, 8.10, 9.2 and 9.4

• CentOS 7.9

• Suse Linux 15.3

Firewall

• Port 443/TCP to be open to allow the clients to access dashboard and API

• To download application artifacts (Docker images and binaries), updates, and configuration files, the cluster requires a public internet connection with a minimum download speed of 40 Mbps and an upload speed of 8 Mbps. For a faster initial setup, a download speed of 100 Mbps or more is recommended.

K3s version support

1.23, 1.24, 1.26

Other requirements

• Domain Name Service (DNS) with public name resolution enabled

• Network Time Protocol (NTP) service configured

• Internet access to a network-based repository for software update packages

• Fixed private IPv4 address

• Unique static hostname

• QoS on network traffic will impact Discovery & Classification speed significantly

  • Disable any QoS or prioritise traffic to the GV Server cluster

• Microsoft can throttle requests to online services such as OneDrive or SharePoint online

  • This will impact discovery and classification of OneDrive, SharePoint, Teams etc.

For hardened systems, see: Deploying Product in CIS hardened OS or K3s

When deploying using RHEL / CentOS / Suse:

• disable firewalld, fapolicyd, nm-cloud-setup, crypto.fips_enabled

• refer to the official K3s documentation and our troubleshooting guide for additional setup.

When deploying using Ubuntu:

• disable ufw, systemd-resolved, apparmor