Requirements
Controller OS
Root on one of:
- Debian 12 or 13
- Ubuntu 22.04 or 24.04
- RHEL, AlmaLinux or Rocky Linux 9
Docker Engine with the Compose plugin (the installer can install it).
Ports
| Port | Direction | Use |
|---|---|---|
| UDP 2055 | in | NetFlow v5/v9 and IPFIX |
| UDP 6343 | in | sFlow v5 |
| TCP 179 | out to the edge (optional listen) | BGP |
| TCP 80 / 443 | in | ACME, if you use --tls acme |
| 127.0.0.1:9411 | local | Operator dashboard |
| 127.0.0.1:9410 | local | API |
Use --public or a reverse proxy to expose the dashboard and API.
Scrub host
- Kernel 5.15 or newer (6.x recommended)
CAP_BPFandCAP_NET_ADMIN- Native XDP drivers such as
i40e,ice,mlx5,ixgbe(generic mode works, slowly) - IP forwarding
- Policy routing so diverted prefixes do not loop
- A clean-return VLAN or GRE
- Packages:
.deb,.rpm, static binary, systemd unit, or container
Outbound
HTTPS for customer and operator webhooks. SMTP if you send email alerts.
BGP peers
Tested in the lab: FRR 10.2.
Planned to verify: Juniper, Arista, MikroTik, Cisco. Also planned: IPv6 end to end, NIC throughput numbers, arm64.
When the host is ready, go to Getting started.