Technical Requirements
Minimum Requirements (on premise)
Ubuntu Server 20.04 LTS ("Focal Fossa"):
- Please download the Ubuntu ISO image from: https://releases.ubuntu.com/focal/
8 vCPUs (Preferably 16 vCPUs)
16 GB RAM (Preferably 32GB)
32 GB Free Disk Space (SSD): Filescan requires 25 GB on the first installation (subsequent upgrades will potentially consume more disk space)
- Please note that the Ubuntu server installer will configure the main disk as an LVM group by default (2 partitions mirroring each other). For example, on a 100 GB disk you will get approx. 50 GB usable storage. This provides redundancy and better data safety, so please consider doubling your disk size. Alternatively, you can uncheck the "Set up this disk as an LVM group" option during the Ubuntu installation, see: https://ubuntu.com/server/docs/install/storage
Internet access is temporarily required during the installation & upgrade process.
Note: More than 25000 scans/day requires a custom multi-server setup and needs to be scoped out with the engineering team.
Due to the low resource requirements and cloud-native capability, OPSWAT Filescan Sandbox does not require nested VMs and can be deployed and operate with its proprietary virtualization technology directly on the host system.
Example Hardware Setup
- Intel Xeon-E 2136 (12M Cache, 3.30 GHz)
- RAM 32GB DDR4 ECC 2666 MHz
- 2x SSD NVMe 256GB RAID
Note: this is an example system that would allow processing 50K files/day with a retention period of 10 days.
Throughput / Hardware Requirements
The following table lists explanatory system specs with a retention period of 10 days:
Scans Per Day | Required System CPUs | Required System RAM | Required Storage per Retention Period |
---|---|---|---|
1000 | 4 | 16 GB | 100 GB |
2500 | 4 | 16 GB | 100 GB |
5000 | 4 | 16 GB | 256 GB |
10000 | 8 | 16 GB | 512 GB |
25000* | 16 | 32 GB | 512 GB |
*Currently the maximum numbers of scans/day per instance
Minimum Cloud Requirements (AWS)
- 5000 scans/day:
m5a.xlarge
- 10000 scans/day:
c5a.2xlarge
- 25000 scans/day:
c5a.4xlarge
Network Setup
It is recommended to run the product in a segregated network segment, or to operate the sandbox engine in a DMZ entirely.