Network and Bandwidth Requirements

Refer to the following sections for details on the network and bandwidth requirements.

Communication Port Numbers

Distrubited Architecture (DA) components use ports 2210 and 4210 for communication between each other. The port number 2210 is used for configuration and control and port 4210 is used for sending queries and results. Flow data is sent to the listening port of the Proxy unit (set in the GUI), and redistributed to Slave units on a port number increased by 30000. For example, if a Proxy unit listening port is set to 3000, then the Proxy forwards flow data to the Slave units on port 33000). Additionally, if Flowmon Anomaly Detection System (ADS) is used in DA, SSH port number 22 is used for communication between units. For proper functionality of Distributed Architecture, all these ports must be allowed on the firewall.

Bandwidth Utilization of DA Components

The following bandwidth utilization is valid for communication between the Master unit and one Source Group. The communication between individual components in Distributed Architecture is not currently encrypted.

Operation	Bandwidth
Normal operations User is working with top statistics, list flow, and other data with a reasonable result size	0.1 Mbps
Large data set delivery User is receiving an unlimited list of flow results for large set of data	10 Mbps
Major configuration updates exchange	0.5 Mbps

Delivery of update packages

Update package transmission between the Master and Proxy unit is not considered time-critical and will only use the available bandwidth.