Requirements Matrix
The following tables describe what is required for each single-service node. In a High Availability configuration, a single-service node represents each of the HA server instances.
Supported Platforms:
| 产品 | Debian | Centos* | RHEL | Ubuntu | Windows服务器 | Helm Charts | SLES |
|---|---|---|---|---|---|---|---|
| Artifactory | 10.x | 7.x | 7.x, 8.x | 18.04, 20.04 |
2016 or 2019 | 3.x | 12 SP5 |
| Insight | 10.x | 7.x | 7.x, 8.x | 18.04, 20.04 |  |
3.x | 12 SP5 |
| Mission Control | 10.x | 7.x | 7.x, 8.x | 18.04, 20.04 | |
3.x | 12 SP5 |
| Xray | 10.x | 7.x | 7.x, 8.x | 18.04, 20.04 | |
3.x | |
| Distribution | 10.x | 7.x | 7.x, 8.x | 18.04, 20.04 | |
3.x | |
| Pipelines | |
7.x | 7.x, 8.x | 18.04, 20.04 | Build nodes only | 3.x | |
Breaking Change Affecting RPM/Yum/Linux Archive Installations on Centos 7.x*
As part of our commitment to our customers to maintain the security and reliability of your JFrog Platform, from Artifactory version v7.43.x, JFrog Artifactory will officially run with JDK 17 and Tomcat 9.x on all installation types. Note that JDK 17 and Tomcat 9.x are not supported on all Centos 7.x versions.
CentOS 8.x Support
CentOS 8.x reached its end-of-life in December 2021. CentOS 8.x support for JFrog products will be deprecated by the end of June 2022.
SLES 12 SP5 supports Docker Compose installation for all products except for pipelines.
Reserving Ports for Services
As JFrog adds additional services to the JFrog Platform portfolio, there is a need to "reserve" ports for the Platform to ensure that the service works properly. To this end, JFrog recommends reserving ports8000-8100 (this is addition tothe existing internal ports documented below).
Minimum System and Application Requirements
| 产品 | Processor | 内存 | Storage | External Network Port | Internal Network Ports (default) | Databases/Third Party Applications |
|---|---|---|---|---|---|---|
| Artifactory(Version 7.0 and above) |
|
If the Mission Control microservice is enabled, you will need to take into account a +100MB memory footprint increase. For more information, seeMigrating from Mission Control to Insight. |
Based on expected artifact storage volume. Fast disk with free space that is at least 3 times the total size of stored artifacts.
|
|
|
Supported: Artifactory 7.0 to 7.6:MySQL5.7. MySQL5.6 is no longer supported as it has reached its EOL; users are requested to upgrade to the above versions of MySQL.
Artifactory does not Kerberos SSO for MS SQL. PostgreSQL:
MariaDB |
Insight (You can install and use Insight only if you use Artifactory 7.27.3 or later) Insight will only display Xray charts if you have Xray version 3.33.3 or later. Upgrade Xray to version 3.33.3 to view the Xray charts. Min requirements. Assuming running with an external database. |
By default, Insight stores one year of storage information, one year of metrics information, one year of events information (like garbage collection details), and one day of requests information. The following sizing information is provided based on the default configuration. If you want to use Insight in a high-availability configuration, you must have three or more odd number of nodes. |
|
|
Required: PostgreSQL
Elasticsearch
|
||
| Up to 500 Artifactory Repositories | ||||||
| 4 cores | 5 GB
|
120 GB
|
||||
| 500 to 1500 Artifactory Repositories | ||||||
| 4 cores | 8 GB
|
220 GB
|
||||
| 1500 to 2500 Artifactory Repositories | ||||||
| 4 cores | 14 GB
|
420 GB
|
||||
| More Than 2500 Artifactory Repositories | ||||||
| Contact JFrog Support for sizing requirements. | ||||||
Mission Control Min requirements. Assuming running with an external database. |
4 cores | 12 GB | 100 GB |
|
|
Required: PostgreSQL
Elasticsearch
|
|
Xray The requirements presented here are based on the size of your environment. Use a dedicated server for Xray with no other software running toalleviate performance bottlenecks, avoid port conflicts, and avoid setting uncommon configurations. |
Up to 100k indexed artifacts, and 1K artifacts/builds per day |
8082 |
|
Required: PostgreSQL:
|
||
Xray and DB: 6 CPU |
Xray and DB: 24 GB |
Xray and DB: 500 GB (SSD, 3000 IOPS) |
||||
| Up to 1M indexed artifacts, and 10k artifacts/builds per day | ||||||
|
|
|
||||
| Up to 2M indexed artifacts, and 20k artifacts/builds per day | ||||||
|
|
|
||||
| Up to 10M indexed artifacts, and 50k artifacts/builds per day | ||||||
|
|
|
||||
| Over10M indexed artifacts, and 50k artifacts/builds per day | ||||||
| Contact JFrog Support for sizing requirements. | ||||||
|
The number of nodes above refers to High Availability (HA) setups, not Disaster Recovery. |
||||||
Distribution(Version 2.0 and above) Min requirements. Assuming running with an external database. |
4 CPU | 8 GB | 200 GB SSD storage |
8082 |
|
Required:
Supported: |
| Pipelines(Version 1.0 and above) | Application 4 cores Build Nodes 2 cores for Linux build nodes 4 cores for Windows 19 build nodes |
Application 8 GB Build Nodes 3.75 GB for Linux build nodes 8 GB for Windows 19 build nodes |
100 GB |
|
Pipelines does not support external Redis and you cannot use TLS for Redis. |
Required:
RabbitMQ: 3.8.3 |
ARM64 Support
From version 7.41.4,Artifactory supports installation on ARM64 architecture through Helm and Docker installations. You must set up an external database as the Artifactory database since Artifactory does not support the bundled database with the ARM64 installation. Artifactory installation pulls the ARM64 image automatically when you run the Helm or Docker installation on the ARM64 platform.
Currently, ARM64 support is not available for other JFrog products.
Network
Artifactory, Xray, and other JFrog products all need to be set with static IP addresses. These services also need to be able to communicate directly with each other over the same LAN connection. Hosting these services in geographically distant locations may cause health checks to temporarily fail. Ensure the ports are open and no firewalls block communications between these services.
Java
Java-based products (Artifactory, Distribution, Insight, Mission Control)must run withJDK 17+.TheJDK is already bundled into the applications.
- From Distribution 2.13.2, therequiredJDK version is JDK 17.
- From Artifactory 7.43.x, the supported JDK version is JDK 17, which will be bundled into Artifactory.
JDK 11 is no longer supported.
JVM Memory Allocation
While not a strict requirement, we recommend that you modify the JVM memory parameters used to run Artifactory.
You should reserve at least 512MB for Artifactory.The larger your repository or number of concurrent users, the larger you need to make the -Xms and -Xmx values accordingly.
Set your JVM parameters in thesystem.yaml configuration file.
shared: extraJavaOpts: "-Xms512m -Xmx2g"
Browsers
Artifactory has been tested with the latest versions of:
- Chrome
- Firefox
- Safari (for Mac)
- Edge (Chromium-based versions)
System Time Synchronization
The JFrog Platform requires time synchronization between all JFrog services within the same Platform.
Unsynchronised services may cause issues during authentication and token verification.
码头工人Requirements
对于码头工人,码头工人组合安装,JFrogservices require Docker v18 and above (for Pipelines 18.09 and above) and Docker Compose v1.24 and up to be installed on the machine on which you want to run on.
For install instructions, please refer to the码头工人and the码头工人Composedocumentation.
Helm Chart Requirements
For Helm Charts installations, JFrog services requires the following prerequisites/requirements:
- Kubernetes 1.12+ (for installation instructions, seeKubernetes installation)
- Kubernetes cluster with:
- Dynamic storage provisioning enabled
- Default StorageClass set to persistent storage
JFrog validates compatibility with the core Kubernetes distribution. Since Kubernetes distribution vendors may apply additional logic or hardening (for example, OpenShift and Rancher) JFrog Platform deployment with such platform vendors might not be fully supported.
Special Requirements
Artifactory
Working with Very Large Storage
In most cases,our recommendation is for storage that is at least 3 times the total size of stored artifacts in order to accommodatesystem backups. However, when working with a very large volume of artifacts, the recommendation may vary greatly according to the specific setup of your system.Therefore, when working with over10 Tbof stored artifacts, please contactJFrog supportwho will work with you to provide a recommendation for storage that is customized to your specific setup.
Allocated storage space may vary
Xray downloads and then deletes fetched artifacts after indexing. However, in order to have more parallel indexing processes, and thereby more temporary files at the same time would require more space.
This is especially applicable for large BLOBs such as Docker images.
Installation Recommendation
While Artifactory can use aNetworked File System (NFS)for its binary storage, you should do not install the application itself on an NFS. The Artifactory application needs very fast, reliable access to its configuration files. Any latency from an NFS will result in poor performance when the application fails to read these files. Therefore, install Artifactory on a local disk mounted directly to the host.
To use an NFS to store binaries, use the "file-system" binarystore.xml configuration with the additional"
Xray
Node Recommendations
Use a dedicated node for Xray with no other software running to alleviate performance bottlenecks, avoid port conflicts, and avoid setting uncommon configurations.
Storage Recommendations
In most cases, our recommendation is to use an SSD drive for Xray to have better performance and it is not recommended to use an NFS drive, as it is a disk I/O-intensive service, a slow NFS server can suffer from I/O bottlenecks and NFS is mostly used for storage replication.
Since the local storage used for Xray services are temporary, it does not require replication between the different nodes in a multi-node/HA deployment.
File Handle Allocation Limit
Avoid performance bottlenecks
In the process of deep recursive scan in which Xray indexes artifacts and their dependencies (metadata), Xray needs to concurrently manage many open files. The default maximum number of files that can be opened concurrently on Linux systems is usually too low for the indexing process and can therefore cause a performance bottleneck. For optimal performance, we recommend increasing the number of files that can be opened concurrently to 100,000 (or the maximum your system can handle) by following the steps below.
Use the following command to determine the current file handle allocation limit:
cat /proc/sys/fs/file-max
Then, set the following parameters in your/etc/security/limits.conffile to thelowerof 100,000 or the file handle allocation limit determined above.
The example shows how the relevant parameters in the/etc/security/limits.conffile are set to 100000. The actual setting for your installation may be different depending file handle allocation limit in your system.
root hard nofile 100000 root soft nofile 100000 xray hard nofile 100000 xray soft nofile 100000 postgres hard nofile 100000 postgres soft nofile 100000
6 Comments
Yossi Shaul
system requirements are not up-to-date with the latest ports. see this -https://docs.google.com/document/d/1RVZZm9X6bYDKbUDyRR4-uFqFYQfDn1oDz61NZjeKYis/edit#heading=h.9446og9erz4k. I think we should also specify which ports we need to expose and which are internal. Also what is gRPC
Adi Atzmony
Yossi Shaulthere are some ports that are missing. Should I list all ports that are in the google doc in the documentation?
Yossi Shaul
Java 11 is now required. The instructions on how to configure are also different and describedhereandhere
Unknown User (ofira)
For Xray - I'm missing sizing based on the amount of new artifacts/builds a day as well as directions for initial onboarding - in order to know how to support a large scale.
Also - needed info for the case HA is needed.
The fact that the DBs are external - what is supported and what is not.
Unknown User (ofira)
One more question - is it for the Unified? If so, more changes are needed in this page.
Unknown User (arturoa)
I am not sure what the "Ports" section is really telling me. Are those all the ports being used? Are they ports I need to open and if so, open it them up to everyone or just between the microservices or between HA nodes. The router port is also missing from all the products other than Artifactory.