Self-Hosting Requirements

This guide covers the hardware, software, and network requirements for self-hosting Zero in your own infrastructure.

Enterprise Feature: Self-hosting is available on Enterprise plans. View pricing for details.

Hardware Requirements

Minimum (Up to 100 devices)

Component Specification
CPU 4 cores (x86_64 or ARM64)
RAM 8 GB
Storage 100 GB SSD
Network 1 Gbps, static IP
Component Specification
CPU 8+ cores
RAM 32 GB
Storage 500 GB NVMe SSD
Network 10 Gbps, static IP

Enterprise (1000+ devices)

For large deployments, we recommend a multi-node cluster:

  • 3+ API server nodes (load balanced)
  • 3+ PostgreSQL nodes (replicated)
  • 3+ Redis nodes (clustered)
  • 2+ VPN gateway nodes per region

Software Requirements

Operating System

  • Ubuntu 22.04 LTS or 24.04 LTS (recommended)
  • Debian 12 (Bookworm)
  • RHEL 9 / Rocky Linux 9 / AlmaLinux 9
  • Any Linux with kernel 5.15+

Required Dependencies

# Ubuntu/Debian
sudo apt update
sudo apt install -y \
  docker.io \
  docker-compose-v2 \
  wireguard \
  postgresql-client

# RHEL/Rocky/Alma
sudo dnf install -y \
  docker \
  docker-compose \
  wireguard-tools \
  postgresql

Container Runtime

  • Docker 24.0+ (recommended)
  • Podman 4.0+ (alternative)
  • Kubernetes 1.28+ (for K8s deployment)

Network Requirements

Required Ports

Port Protocol Purpose
443 TCP HTTPS API & Dashboard
51820 UDP WireGuard VPN
5432 TCP PostgreSQL (internal only)
6379 TCP Redis (internal only)
9090 TCP Prometheus metrics (optional)

DNS Configuration

You'll need DNS records for:

  • api.yourdomain.com - API server
  • console.yourdomain.com - Web dashboard
  • vpn.yourdomain.com - VPN gateway

SSL/TLS Certificates

Zero supports:

  • Let's Encrypt (automatic, recommended)
  • Custom certificates (bring your own)
  • Wildcard certificates

Database Requirements

PostgreSQL

  • Version: 15+ (16 recommended)
  • Storage: 10 GB minimum, scales with audit log retention
  • Connections: 100+ max connections

Redis

  • Version: 7.0+
  • Memory: 1 GB minimum
  • Persistence: AOF recommended

Storage Requirements

File Sync Service (Optional)

If using the file sync feature:

  • S3-compatible storage (MinIO, AWS S3, etc.)
  • Storage: Based on your data needs
  • Bandwidth: Consider egress costs

Security Requirements

Firewall Configuration

# Allow HTTPS
sudo ufw allow 443/tcp

# Allow WireGuard VPN
sudo ufw allow 51820/udp

# Enable firewall
sudo ufw enable

SELinux/AppArmor

Zero is compatible with both. Policies are provided in the installation package.

Next Steps