cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
710
Views
0
Helpful
0
Replies

Virtual Appliance Sizing - UDP Director & Flow Collector

TNSC2021
Level 1
Level 1

I am currently deploying Cisco Secure Network Analytics with Virtual Appliances.

 

Trying to figure out the hypervisor resources required.

 

Consulting the documentation here:

https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/system_installation_configuration/SW_7_3_2_VE_Appliance_Data_Store_Install_Guide_DV_1_0.pdf

 

The plan is to deploy a 3 node centralised data store.

 

Need to cater for 20K FPS.

 

According to documentation, UDP director with 2 vCPU / 4GB vRAM / 60GB storage will handle 10K FPS.

 

To me that means I need quantity 2 to scale to 20K FPS.

 

Is it possible to just increase the allocation of vCPU / vRAM / storage to cater for 20K FPS?

 

How does the UDP director scale? Is it linear? Or exponential. Some guidance would be great.

 

Also, the Flow Collectors when used with a centralised data store, do they still need the same level of hypervisor resources?

 

6 vCPU / 32GB vRAM / 200GB storage for 50K FPS.

 

Or can this be scaled down since a centralised data storage is being used?

 

Thanks

0 Replies 0