-
Notifications
You must be signed in to change notification settings - Fork 17
Install Prepare a System
NCSC will try to help you with Taranis on request, but without guarantee on success or response time (Best effort).
It is difficult to provide hard requirements regarding CPU, internal memory and disk space needed to run Taranis. We recommend a minimal configuration with around 10 GB of disk space, 1 processor with 4 cores, and 4 GB of internal RAM.
A typical minimal configuration is identified by the parameters:
- Sources: Around 250 to 500 sources
- Items: Around 1.000 items collected daily from the 250 – 500 sources
- Users: 1 to 3 concurrent users
- Threads: The collector runs with a maximum of 2 threads
- Clustering: Clustering is enabled for around a maximum of 50% of all your sources (125-250 sources)
- Screenshots: Incidentally used
To ensure you have a robust setup, we recommend that your system/configuration is scalable. Make sure you can add more disk space or internal memory to your system if needed. Also make sure that it is possible to change your configuration so that e.g. the collector no longer runs on the same server as the other Taranis components. This way you make sure that both your current Taranis configuration as well as future Taranis configurations can be handled by your infrastructure.
Taranis installation is only supported for
- the latest versions of CentOS (currently version 7 with or without SELinux),
- Ubuntu (16.04LTS, 18.04LTS, 20.04LTS), and
- RedHat (7EL).
Install a server or VM with one of the supported operating systems. Configure a hostname.
NOTE: It would not be easy to put Taranis in Docker, because it runs multiple daemons.
- For CentOS, run
yum install perl. - On Ubuntu 16.04LTS (not needed for 20.04), run
apt-get install perl-modules. Upgrade Perl’s CPAN.pm to at least 1.94_63 (released in 2011) withperl -MCPAN -e 'install CPAN'
The best results are with local delivery of email. Probably you want to configure postfix. Look careful at the headers of sent messages, to see that it does not expose too much details about your infrastructure.
You will need a name for the web-interface of Taranis. Please configure this before starting the installation.
images/taranis-logo-medium.png ©NCSC-NL, License: EUPL-1.2