Aarkam / Aarkam Wiki / Installation / System Prerequisites & Infrastructure Sizing ARK-INST-0201
Unified Architecture (SAT & SCT) Infrastructure Baseline Installation • ARK-INST-0201

System Prerequisites & Infrastructure Sizing

Comprehensive hardware sizing, CPU SIMD vector flags, kernel sysctl parameters, 4Kn storage geometries, and complete network port matrix.

Last updated: Nov 03, 2026 Classification: Sovereign Tier-4 Enterprise
Document Identifier ARK-INST-0201
Standard Status
Production Standard
Compliance Level Saudi NCA ECC-2:2024 / CSCC-1:2023
Release Version V-1.0.0-GA (Production Stable)

The Aarkam Sovereign Storage Platform is engineered for high-assurance bare-metal datacenters, classified air-gapped enclaves, and enterprise private clouds. To achieve line-rate Cauchy Reed-Solomon erasure coding and zero-copy Direct I/O, verify that the physical infrastructure satisfies the baseline specifications below.


1. Hardware Sizing & Specification Matrix

Subsystem Edge / PoC Node Production Standard (SAT / SCT) High-Throughput Enterprise Enclave
CPU Architecture x86_64 (4 Physical Cores) x86_64 (16–32 Cores, Xeon Silver / AMD EPYC) x86_64 (32–64+ Cores, Xeon Platinum / EPYC 9004)
Vector Acceleration AVX2, AES-NI AVX-512 (F, BW, CD, DQ, VL) or AVX2+VAES Dual-socket AVX-512 with hardware VAES
System Memory (RAM) 8 GB ECC DDR4 32–64 GB ECC Registered DDR4/DDR5 128–256 GB Registered ECC DDR5
OS / Root Drive 64 GB SATA SSD 120 GB NVMe PCIe 3.0/4.0 (RAID-1 Mirror) 240 GB+ Enterprise NVMe (DWPD ≥ 3.0)
Data Storage (PageStore) 250 GB NVMe / SSD Direct JBOD NVMe (U.2/U.3) or Enterprise SAS Dedicated High-Density NVMe-oF / Direct SAS-3 JBOD
Network Fabric 1x 1 GbE 2x 10/25 GbE (Bonded 802.3ad LACP) 2x 100 GbE RoCEv2 (RDMA) with Jumbo Frames (MTU 9000)
CPU SIMD Flag Verification: Ahmodi uses vectorized Galois Field $\text{GF}(2^8)$ matrix multiplication. Verify CPU instruction flags before cluster bootstrap:
lscpu | grep -E 'avx|avx2|avx512|aes'

2. Storage Controller & Physical Drive Geometry

2.1 Mandatory Controller IT-Mode (Non-RAID)

Hardware RAID controllers (Dell PERC, Broadcom MegaRAID, HPE Smart Array) are strictly forbidden for data drives and must be flashed to Initiator Target (IT) Mode / HBA Pass-Through:

  • Eliminate Erasure Coding Interference: Ahmodi manages mathematical parity striping across independent failure domains. Nested RAID striping impairs self-healing.
  • Prevent Cache Flush Hazards: Controller write-back caching conflicts with kernel O_DIRECT unbuffered writes, risking silent block corruption during power anomalies.
  • Preserve SMART Telemetry: RAID layers hide raw NVMe telemetry counters from Abodi, disabling predictive Weibull failure forecasts.

2.2 Native 4Kn & Kdouja 66,048-Byte Alignment

  • Native 4Kn (4096-byte logical/physical sectors): Mandatory for enterprise NVMe and nearline SAS drives (>8 TB). Eliminates Read-Modify-Write (RMW) latency degradation.
  • PageStore 66KB Block Alignment: Kdouja writes directly to disk in sector-aligned 66,048-byte physical blocks (512-byte cryptographic header + 64 KB aligned payload) using O_DIRECT on Linux and FILE_FLAG_NO_BUFFERING on Windows Server.

3. Operating System & Kernel Tuning

3.1 Linux Kernel Parameters (/etc/sysctl.d/99-aarkam.conf)

ini
# File descriptor capacity
fs.file-max = 2097152

# Socket connection backlog queue depth
net.core.somaxconn = 65535
net.ipv4.tcp_max_syn_backlog = 65535

# High-bandwidth TCP socket buffers (up to 64MB for 25/100GbE)
net.ipv4.tcp_rmem = 4096 87380 67108864
net.ipv4.tcp_wmem = 4096 65536 67108864
net.core.rmem_max = 67108864
net.core.wmem_max = 67108864

# Network device input queue
net.core.netdev_max_backlog = 250000

# Enable BBR TCP congestion control
net.core.default_qdisc = fq
net.ipv4.tcp_congestion_control = bbr

# Memory management & LSM memory maps
vm.swappiness = 1
vm.dirty_ratio = 10
vm.dirty_background_ratio = 5
vm.max_map_count = 262144

Apply parameters immediately: sudo sysctl --system

3.2 Linux Security Limits (/etc/security/limits.d/99-aarkam.conf)

ini
aarkam    soft    nofile    1048576
aarkam    hard    nofile    1048576
aarkam    soft    nproc     524288
aarkam    hard    nproc     524288
aarkam    soft    memlock   unlimited
aarkam    hard    memlock   unlimited

4. Complete Network Port & Firewall Matrix

Port Protocol Direction Service / Component Role & Security Standard
57771 TCP Inbound AarkamIO Web Console Management Console, REST Admin API, and /genesis wizard (HTTPS TLS 1.3).
7771 TCP Inbound AarkamIO Web Ingress Cleartext HTTP Ingress (Auto-redirects to 57771).
57772 TCP Inbound Rokka S3 Gateway Secure S3 REST API (AWS SigV4 + TLS 1.3 / AES-256-GCM).
7772 TCP Inbound Rokka S3 Gateway High-Speed Cleartext S3 REST API (Internal VPC / Dedicated Storage Network).
57774 TCP Bi-dir Rokka Coordinator Raft Consensus RPC, Leader Election, and Metadata Sync (HTTP/2 gRPC mTLS).
7774 TCP Bi-dir Rokka Coordinator Internal Cluster Consensus & Topology Synchronization (HTTP/2 gRPC).
57775 TCP Bi-dir Abodi (Kdouja) Cauchy Reed-Solomon Direct I/O Chunk Streaming & Replication (mTLS).
7775 TCP Local Abodi (Kdouja) Intra-Node Block Allocation Endpoint (Local gRPC 127.0.0.1).
57776 TCP Inbound Abodi Diagnostics Node Telemetry, Hardware Manifest, and SMART Diagnostics (HTTPS mTLS).
7776 TCP Local Abodi Diagnostics Local Host Diagnostic and Liveness Endpoint (Cleartext 127.0.0.1).
9090 TCP Inbound Telemetry Exporter Prometheus / Grafana OpenMetrics Telemetry Scrape.