Unified Architecture (SAT & SCT)
Infrastructure Baseline
Installation
•
ARK-INST-0201
System Prerequisites & Infrastructure Sizing
Comprehensive hardware sizing, CPU SIMD vector flags, kernel sysctl parameters, 4Kn storage geometries, and complete network port matrix.
Document Identifier
ARK-INST-0201
Standard Status
Production Standard
Compliance Level
Saudi NCA ECC-2:2024 / CSCC-1:2023
Release Version
V-1.0.0-GA (Production Stable)
The Aarkam Sovereign Storage Platform is engineered for high-assurance bare-metal datacenters, classified air-gapped enclaves, and enterprise private clouds. To achieve line-rate Cauchy Reed-Solomon erasure coding and zero-copy Direct I/O, verify that the physical infrastructure satisfies the baseline specifications below.
1. Hardware Sizing & Specification Matrix
| Subsystem | Edge / PoC Node | Production Standard (SAT / SCT) | High-Throughput Enterprise Enclave |
|---|---|---|---|
| CPU Architecture | x86_64 (4 Physical Cores) | x86_64 (16–32 Cores, Xeon Silver / AMD EPYC) | x86_64 (32–64+ Cores, Xeon Platinum / EPYC 9004) |
| Vector Acceleration | AVX2, AES-NI | AVX-512 (F, BW, CD, DQ, VL) or AVX2+VAES | Dual-socket AVX-512 with hardware VAES |
| System Memory (RAM) | 8 GB ECC DDR4 | 32–64 GB ECC Registered DDR4/DDR5 | 128–256 GB Registered ECC DDR5 |
| OS / Root Drive | 64 GB SATA SSD | 120 GB NVMe PCIe 3.0/4.0 (RAID-1 Mirror) | 240 GB+ Enterprise NVMe (DWPD ≥ 3.0) |
| Data Storage (PageStore) | 250 GB NVMe / SSD | Direct JBOD NVMe (U.2/U.3) or Enterprise SAS | Dedicated High-Density NVMe-oF / Direct SAS-3 JBOD |
| Network Fabric | 1x 1 GbE | 2x 10/25 GbE (Bonded 802.3ad LACP) | 2x 100 GbE RoCEv2 (RDMA) with Jumbo Frames (MTU 9000) |
CPU SIMD Flag Verification:
Ahmodi uses vectorized Galois Field $\text{GF}(2^8)$ matrix multiplication. Verify CPU instruction flags before cluster bootstrap:
lscpu | grep -E 'avx|avx2|avx512|aes'
2. Storage Controller & Physical Drive Geometry
2.1 Mandatory Controller IT-Mode (Non-RAID)
Hardware RAID controllers (Dell PERC, Broadcom MegaRAID, HPE Smart Array) are strictly forbidden for data drives and must be flashed to Initiator Target (IT) Mode / HBA Pass-Through:
- Eliminate Erasure Coding Interference: Ahmodi manages mathematical parity striping across independent failure domains. Nested RAID striping impairs self-healing.
- Prevent Cache Flush Hazards: Controller write-back caching conflicts with kernel
O_DIRECTunbuffered writes, risking silent block corruption during power anomalies. - Preserve SMART Telemetry: RAID layers hide raw NVMe telemetry counters from Abodi, disabling predictive Weibull failure forecasts.
2.2 Native 4Kn & Kdouja 66,048-Byte Alignment
- Native 4Kn (4096-byte logical/physical sectors): Mandatory for enterprise NVMe and nearline SAS drives (>8 TB). Eliminates Read-Modify-Write (RMW) latency degradation.
- PageStore 66KB Block Alignment: Kdouja writes directly to disk in sector-aligned 66,048-byte physical blocks (512-byte cryptographic header + 64 KB aligned payload) using
O_DIRECTon Linux andFILE_FLAG_NO_BUFFERINGon Windows Server.
3. Operating System & Kernel Tuning
3.1 Linux Kernel Parameters (/etc/sysctl.d/99-aarkam.conf)
ini
# File descriptor capacity
fs.file-max = 2097152
# Socket connection backlog queue depth
net.core.somaxconn = 65535
net.ipv4.tcp_max_syn_backlog = 65535
# High-bandwidth TCP socket buffers (up to 64MB for 25/100GbE)
net.ipv4.tcp_rmem = 4096 87380 67108864
net.ipv4.tcp_wmem = 4096 65536 67108864
net.core.rmem_max = 67108864
net.core.wmem_max = 67108864
# Network device input queue
net.core.netdev_max_backlog = 250000
# Enable BBR TCP congestion control
net.core.default_qdisc = fq
net.ipv4.tcp_congestion_control = bbr
# Memory management & LSM memory maps
vm.swappiness = 1
vm.dirty_ratio = 10
vm.dirty_background_ratio = 5
vm.max_map_count = 262144
Apply parameters immediately: sudo sysctl --system
3.2 Linux Security Limits (/etc/security/limits.d/99-aarkam.conf)
ini
aarkam soft nofile 1048576
aarkam hard nofile 1048576
aarkam soft nproc 524288
aarkam hard nproc 524288
aarkam soft memlock unlimited
aarkam hard memlock unlimited
4. Complete Network Port & Firewall Matrix
| Port | Protocol | Direction | Service / Component | Role & Security Standard |
|---|---|---|---|---|
| 57771 | TCP | Inbound | AarkamIO Web Console | Management Console, REST Admin API, and /genesis wizard (HTTPS TLS 1.3). |
| 7771 | TCP | Inbound | AarkamIO Web Ingress | Cleartext HTTP Ingress (Auto-redirects to 57771). |
| 57772 | TCP | Inbound | Rokka S3 Gateway | Secure S3 REST API (AWS SigV4 + TLS 1.3 / AES-256-GCM). |
| 7772 | TCP | Inbound | Rokka S3 Gateway | High-Speed Cleartext S3 REST API (Internal VPC / Dedicated Storage Network). |
| 57774 | TCP | Bi-dir | Rokka Coordinator | Raft Consensus RPC, Leader Election, and Metadata Sync (HTTP/2 gRPC mTLS). |
| 7774 | TCP | Bi-dir | Rokka Coordinator | Internal Cluster Consensus & Topology Synchronization (HTTP/2 gRPC). |
| 57775 | TCP | Bi-dir | Abodi (Kdouja) | Cauchy Reed-Solomon Direct I/O Chunk Streaming & Replication (mTLS). |
| 7775 | TCP | Local | Abodi (Kdouja) | Intra-Node Block Allocation Endpoint (Local gRPC 127.0.0.1). |
| 57776 | TCP | Inbound | Abodi Diagnostics | Node Telemetry, Hardware Manifest, and SMART Diagnostics (HTTPS mTLS). |
| 7776 | TCP | Local | Abodi Diagnostics | Local Host Diagnostic and Liveness Endpoint (Cleartext 127.0.0.1). |
| 9090 | TCP | Inbound | Telemetry Exporter | Prometheus / Grafana OpenMetrics Telemetry Scrape. |