System Requirements
For Keycyte PAM to operate with optimal performance, your system infrastructure must meet certain minimum requirements. This section contains recommended hardware specifications for production environments, operating system requirements, and network configuration details.
Minimum Hardware Requirements
Processor (CPU)
- Minimum: 8 Core CPU (physical or virtual)
- Recommended: 16 Core CPU for high user density
- Supported Architectures: x86_64, AMD64
- Virtualization: VMware vSphere, Hyper-V, KVM supported
Memory (RAM)
- Minimum: 16 GB RAM
- Recommended: 32 GB RAM for enterprise environments
- Swap Space: 50% of RAM capacity for swap space
- Memory Allocation: Dynamic memory allocation supported
Storage
- System Disk: 100 GB SSD (minimum)
- Data Storage: 500 GB SSD (for logs, records, database)
- IOPS: Minimum 1000 IOPS recommended
- Backup Storage: Separate storage unit recommended
Network Requirements
- Network Interface: 1 Gbps Ethernet (minimum)
- Bandwidth: 1-2 Mbps per user should be calculated
- Latency: Less than 50ms to Domain Controller
- Firewall: Required port openings must be made
Operating System Requirements
Supported Platforms
- Primary OS: Debian 12 (Bookworm) - Recommended
- Alternative: Ubuntu 22.04 LTS
- Kernel: Linux Kernel 5.15 or above
- Architecture: 64-bit mandatory
System Dependencies
- Docker Engine: 24.0 or above
- Docker Compose: 2.20 or above
- Python: 3.11 or above
- OpenSSL: 3.0 or above
- PostgreSQL: 15.x (embedded or external)
Network and Security Requirements
Port Requirements
- HTTPS: 443 (Web Interface)
- SSH: 22 (Management Access)
- RDP Gateway: 3389 (Windows Access)
- Database: 5432 (PostgreSQL)
- Monitoring: 9090 (Prometheus)
External Connectivity
- Internet Access: For certificate validation
- NTP Synchronization: Time synchronization critical
- DNS Resolution: FQDN resolution required
- LDAP/AD: Ports 389/636 for authentication
Scalability and Performance
User Capacity
- Single Instance: 500 concurrent users
- Clustered Installation: 5000+ concurrent users
- Session Recording: 100 MB/hour per user
- Database Growth: 10-15% monthly increase expected
Performance Optimization
- CPU Affinity: Core isolation recommended
- Memory Tuning: Kernel parameters should be optimized
- Disk I/O: Separate volumes for logs/data
- Network Optimization: Enable jumbo frames
High Availability Requirements
Minimum HA Installation
- Load Balancer: HAProxy or F5
- Shared Storage: NFS/iSCSI/Ceph
- Database: PostgreSQL Streaming Replication
- Monitoring: Automated health checks
Disaster Recovery
- Backup Strategy: Daily full, hourly incremental
- RTO: 4 hours targeted
- RPO: 1 hour maximum data loss
- Remote Backup: Mandatory for compliance
Monitoring and Logging
System Monitoring
- Metric Collection: Prometheus + Grafana
- Log Aggregation: ELK Stack recommended
- Capacity Planning: Trend analysis required
Security Monitoring
- SIEM Integration: Syslog RFC-5424 format
- Vulnerability Scanning: Nessus/OpenVAS
- Security Hardening: CIS Benchmarks
- Compliance: SOC2/ISO27001 requirements
These requirements are optimized for production environments. Lower specifications can be used for development and test environments, but performance and security limitations should be considered.