Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 18 Next »

Requirements

Before starting with the relay installation, make sure you can provide a machine with the following requirements:

Note that you must prepare your network to reach the relay packages URLs specified below.

Hardware

Minimum requirements

  • 2 vCPU

  • Memory → 8 GB

  • Hard disk → The hard disk memory should be x2.25 the required disk buffer.

Storage requirements

Note that your required storage should be calculated in relation to the data ingest. Higher volumes of data would allow you to handle potential long downtimes in the network better.

Learn more about this in Relay buffers.

Software

Supported Operating Systems

  • Ubuntu 20 & 22

  • RHEL / CentOS 8 & 9

Note that Devo Relay up to version 2.5.0 was certified in Ubuntu 18 and RHEL / CentOS 7.x. These OSs will be unsupported by June 2024, so please upgrade your system to the newest versions.

Network

Ensure that the relay can access the following resources:

For USA users

  • Devo ELB - collector-us3.devo.io:443

  • Relay API - https://api-us3.devo.com/maduro

  • Query API - https://api-us3.devo.com/search

For EU users

  • Devo ELB - collector-eu.devo.io:443

  • Relay API - api-eu.devo.com

  • Query API - apiv2-eu.devo.com

For CA users

  • Devo ELB - collector-ca.devo.io:443

  • Relay API - api-ca.devo.com

  • Query API - apiv2-ca.devo.com

For APAC (Asia-Pacific) users

  • Devo ELB - collector-ap.devo.io:443

  • Relay API - api-apac.devo.com

  • Query API - api-apac.devo.com

The Relay will be different depending on the ingestion source. Currently we have collector-ap for Singapore and collector-ap2 for Sydney.

For GCP (Spain) users

  • Devo ELB - collector-sasr.devo.io:443 for syslog; 8443 for HTTP

  • Relay API - apiv2-sasr.devo.com

  • Query API - apiv2-sasr.devo.com

These are the ports used by the relay:

  • Internal relay ports → 12996-12998

  • Reserved inbound ports → 12999 to 13002 configured with default rules

  • Custom inbound ports → 13003 to 13XXX reserved for custom rules (the exact number of ports depends on the number of rules to be created)

These ports should not be used by any other services.

Deployment topologies

Devo Relay can be deployed as a single node or in a cluster for High Availability (HA).

Single node requirements

  • One machine with the requirements listed above

  • One IP address for the relay

HA active-passive with 2 nodes

  • Two machines with the requirements listed above in the same network

  • 3 IP addresses (one per node and one for the virtual IP)

Compatibility between Devo Relay and Devo platform deployments

We strongly recommend using Devo Relay v2.X.X if you are using Devo with platform version 7.1.X or above.

Deprecated versions

Note that relay versions 1.4.2 and older are deprecated and no longer supported by Devo.

Devo Relay version

Devo platform version

1.4.2 and older

Any

2.X.X

7.1.X or above

You can check your Devo environment platform version by clicking Help → Customer support from the Devo navigation pane. The platform version appears at the left bottom corner of the window.

  • No labels