Virtual deployments are supported as long as the hardware specifications are met and the required resources are available to Carbon Black EDR.
Virtual environments create economies of scale by time-sharing hardware resources between multiple machines. This can create performance bottlenecks, particularly in the disk subsystem, if those resources are oversubscribed. To mitigate these risks, you must dedicate and reserve hardware resources.
- Dedicated and Reserved CPU, RAM, and IOPs resources provided to the Carbon Black EDR virtual machine per this document
- Hardware specifications and recommendations persist (# processor, # RAM, disk allocation).
- Disk and SAN considerations:
- Data partition (defaults to /var/cb/data directory) should be as fast as possible. SSD Disk I/O must meet requirements listed in Server sizing chart based on event data volume.
- If you use a SAN, we require placing the data partition (defaults to /var/cb/data directory) on a dedicated LUN.
