Organizations hosting SmartSimple in a client-managed Private Cloud environment must meet the following operating system, computing, storage, and network requirements.
Operating System
The following operating systems are supported for Private Cloud server deployments.
- CentOS 7 x86-64 (currently supported version)
- RHEL 7 x86-64 is also compatible
Computing Resources
The following CPU and memory minimums are required to run SmartSimple in a Private Cloud environment.
| Resource | Specification | Status |
|---|---|---|
| CPU | Minimum equivalent to an Amazon Web Services (AWS) m4.xlarge instance: 4 virtual CPU units of 2.3 GHz Intel Xeon E5-2686 v4 or 2.4 GHz Intel Xeon E5-2676 v3 processors | Required |
| Memory | Minimum 16 GB RAM (equivalent to an AWS m4.xlarge instance) | Required |
Storage
The following storage volumes and minimum sizes are required for a Private Cloud server.
| Volume | Minimum Size | Mount Point | Status |
|---|---|---|---|
| Root volume | 10 GB | / | Required |
| SmartSimple volume | 500 GB | /smartsimple | Required |
| Ext volume (4 partitions of 5 GB each) | 20 GB | /tmp, /var, /var/log, /var/log/audit | Recommended |
All volumes must support dynamic expansion or addition of new volumes as capacity grows. It is recommended to apply encryption to all volumes. SmartSimple uses AWS Key Management Service (KMS) with AES-GCM 256-bit encryption, with keys rotated annually.
Network
A Private Cloud server requires the following inbound and outbound firewall ports.
Inbound Firewall Ports
The following ports must be open for inbound traffic to the Private Cloud server.
| Port | Source | Purpose | Status |
|---|---|---|---|
| 80 (HTTP) | All sources | Web access | Required |
| 443 (HTTPS) | All sources | Secure web access | Required |
| 22 (SSH) | SmartSimple office static IPs | Administrative access for SmartSimple personnel. | Required |
| 22 (SSH) | Other SmartSimple environments | Environment synchronization, for example, backup environment. | Required |
| 8009 (AJP) | Web layer | Web-to-application communication, required only if web and application are on separate servers. | Required if applicable |
| 3306 (MySQL) | Application layer | Application-to-database communication, required only if application and database are on separate servers. | Required if applicable |
| All other | All sources | Restrict all other inbound connections. | Recommended |
Outbound Firewall Ports
The following ports must be open for outbound traffic from the Private Cloud server.
| Port | Destination | Purpose | Status |
|---|---|---|---|
| 80 (HTTP) | All sources | Web traffic | Required |
| 443 (HTTPS) | All sources | Secure web traffic | Required |
| 22 (SSH) | Other SmartSimple environments | Environment synchronization, for example, production environment. | Required |
| 123 (NTP) | All sources | Time synchronization | Required |
| 587 (SMTP) | All sources | Required | |
| 8009 (AJP) | Application layer | Web-to-application communication, required only if web and application are on separate servers. | Required if applicable |
| 3306 (MySQL) | Database layer | Application-to-database communication, required only if application and database are on separate servers. | Required if applicable |
| All | All sources | Allow all outbound traffic | Recommended |