System requirements
Server configuration
| Item | Requirement |
|---|---|
| Devices per server | There is no physical limit on the number of Devices per server. The specification here is capable of providing a response time of 2 seconds or less for every user when access requests are made simultaneously by 70 Devices with Salto Space and Salto XS4 Face co-located. Consideration needs to be given to the number of concurrent access requests that can be expected. Increasing processor core count and clock speed will provide more concurrent requests if needed. In this context simultaneously means within a 10 second window. |
| Network interfaces | This must be a wired connection. |
| CPUs | Min. 3.2 GHz 8 Cores |
| Memory | 32 GB |
| Storage | Mirrored SSD - 480 GB We strongly recommend that physical storage is encrypted. |
| Architecture | Intel/AMD x64 must support AVX2 instruction set Supported processors: AMD Ryzen 7 and 9, Threadripper Intel Core i9, Corre i7 This is only a guide, you should confirm that the processor of your selectted hardware (or virtualisation driver) supports AVX2 instructions. |
| Firewall | The Server requires the following inbound traffic to be allowed from the Devices on the following ports:UDP/123 - NTP. The Server uses Cloudflare Time Services for time synchronization.TCP/443 - HTTPS |
Network configuration
| Item | Requirement |
|---|---|
| Network Type | A dedicated, isolated Access Control VLAN for all XS4 Face Devices (may be shared with other Salto network devices) |
| IP Subnet | Must be large enough to support all locks, camera units, and servers/controllers. Must not use 172.31.255.0/24 |
| Traffic Rules | No inbound or oubound traffic allowed within the VLAN except to the Server. Devices must remain isolated from external networks. |
| Server Outbound Ports | 123 (NTP), 443 (HTTPS/TLS), 8883 (MQTT/mTLS). Only the Server requires outbound access. |
| Allowed External Hosts | Must alow outbound traffic from the Server to: datadoghq.eu time.cloudflare.com *.datadog.pool.ntp.org *.xs4face.app zrqlyb08zwo87fkeomp0on.azurecr.io enrollmentapiweu38d07.blob.core.windows.net |
| DHCP | Required to assign IPs to Devices. The Server must have a reserved, fixed IP address that cannot change once Devices are commissioned. |
| DNS | Required for the Server only. Devices do not use DNS and receive the Server IP during commissioning. |
| Physical Network | Cat 5e or Cat 6 cabling with Gigabit switches. Wired connections only. |
