Before You Start

Autonomous Identity server software requires the following hardware and software requirements to run in your production environment. Autonomous Identity’s flexible architecture runs in a variety of network environments: on-prem, cloud, multi-cloud, and hybrid.

Files to Download

You deploy Autonomous Identity using a Docker image that pulls other dependent images from the ForgeRock Google Cloud Registry (gcr.io) repository and installs the components on a target node. ForgeRock Autonomous Identity customers must contact ForgeRock for a registry key to download the images. For specific instructions on obtaining the registry key, see How To Configure Service Credentials (Push Auth, Docker) in Backstage.

Autonomous Identity requires the following Docker image for installation.

Table 1: Autonomous Identity Software
Docker Image Docker Image URL

gcr.io/forgerock-autoid/deployer:2021.3.2

When you run the install process, you will download the image file from the ForgeRock Google Cloud Repository. For more information, see Install Autonomous Identity.

Hardware and Memory Requirements

Autonomous Identity has a number of components that include application, data, and analytics servers, which are all included in the Docker images. The minimum hardware and memory requirements for a single-node target and a separate deployer machine are as follows:

Table 2: Hardware and Memory Requirements
Vendor Versions

Deployer Node

32 GB RAM, 8 CPU

Analytics (Target) Node

64 GB RAM, 16 CPU

Storage Requirements

Autonomous Identity has a number of components that include application, data, and analytics servers, which are all included in the Docker images. The minimum storage requirements for a single-node deployment are as follows:

Autonomous Identity requires the following minimum storage requirements:

Table 3: Storage Requirements
Type Size

Data Storage

100 GB (minimum), 1 TB (production)

Operating Systems Requirements

Autonomous Identity is supported on the following operating system:

Table 4: Operating System Requirements
Vendor Versions

CentOS

7.7 and higher

Redhat Enterprise Linux

7.9

Cloud Services Requirements

Autonomous Identity has been deployed successfully using the following cloud services:

Table 5: Cloud Services Requirements
Vendor Versions

Google Cloud Platform (GCP)

Latest

Amazon Web Services (AWS) standard Elastic File System (EFS) shared drive

Latest

Java Requirements

Autonomous Identity software supports the following Java environments:

Table 6: Java Requirements
Vendor Versions

OpenJDK

8u262 and higher

Third Party Software Requirements

Autonomous Identity deployments uses the following third-party software:

Table 7: Third-Party Software Requirements
Component Version Usage

Python

3.6 and higher

Scripts

Docker CE

18.09.1

Container cluster management

Apache Cassandra

3.11.2 and higher

Database for all Autonomous Identity services

Apache Spark

3.1 and higher

Cluster to run Autonomous Identity analytics

Apache Livy

0.8.0-incubating and higher

REST interface to Spark master to run Autonomous Identity analytics

Mongo DB

4.4

Database for all Autonomous Identity services

HashiCorp Consul

1.7 and higher

Service discovery and configuration server

nginx

1.18 and higher

Reverse proxy for routing HTTPS traffic

Open Distro for Elasticsearch

1.9 and higher

Distributed, open source search engine for all data types.

OpenLDAP

2.4.50 and higher

An LDAP server backend.

Supported Browsers

The following browser is supported for use in production:

Table 8: Supported Browsers
Vendor Versions

Google Chrome

version 85.0.4183.121 and higher

Mozilla Firefox

version 86.0.1 and higher

Autonomous Identity Ports

The following ports are implemented in Autonomous Identity:

Table 9: Autonomous Identity Ports
Port Protocol Machine Source Description

2377

TCP

Docker managers

Docker managers and nodes

Communication between the nodes of a Docker swarm cluster

7946

TCP/UDP

Docker managers and workers

Docker managers and workers

Communication among nodes for container network discovery

4789

UDP

Docker managers and workers

Docker managers and workers

Overlay network traffic

7001

TCP

Cassandra

Cassandra nodes

Internode communication

9042

TCP

Cassandra

Cassandra nodes, Docker managers and nodes

CQL native transport

27017

TCP

MongoDB

MongoDB nodes, Docker managers and nodes

Default ports for mongod and mongos instances

9200

TCP

Open Distro for Elasticsearch

Docker managers and nodes

Elasticsearch REST API endpoint

7077

TCP

Spark master

Spark workers

Spark master internode communication port

40040-40045

TCP

Spark Master

Spark Workers

Spark driver ports for Spark workers to callback

443

TCP

Docker managers

User’s browsers/API clients

Port to access the dashboard and API