>
    Strata Copilot
    CN-Series System Requirements for the Kubernetes Cluster
    Focus
    Download PDF
    Focus
    1. Home
    2. CN-Series
    3. Getting Started with CN-Series
    4. CN-Series System Requirements for the Kubernetes Cluster
    Download PDF
    CN-Series

    CN-Series System Requirements for the Kubernetes Cluster

    Table of Contents

    CN-Series System Requirements for the Kubernetes Cluster

    Where Can I Use This?What Do I Need?
    • CN-Series deployment
    • CN-Series 10.1.x or above Container Images
    • Panorama running PAN-OS 10.1.x or above version
    • Helm 3.6 or above version client for CN-Series deployment with Helm
    Here are recommended system requirements for deploying the CN-Series across its multiple supported modes:

    PAN-OS 10.1

    The following table shows the system requirements for the cluster on which the CN-Series is deployed. These values are general guidelines for CPU, memory, and disk storage; the amount of resources you deploy might vary depending on your needs.
    The CN-Series Medium is not available for the CN-Series as a Daemonset.
    Resource
    CN-MGMT-Small
    CN-NGFW-Small
    CN-MGMT-Medium
    CN-NGFW-Medium
    CN-MGMT-Large
    CN-NGFW-Large
    Memory (Minimum)
    3GB
    • 2GB (Daemonset)
    • 2.5GB (K8s Service)
    3GB
    6GB
    4GB
    48GB
    CPU Min
    2 (Recommended)
    2 (Recommended)
    2 (Recommended)
    4 (Recommended)
    4 (Recommended)
    12 (Recommended)
    CPU Max
    N/A
    31
    N/A
    31
    N/A
    31
    Disk
    50GB
    N/A
    50GB
    N/A
    50GB
    N/A

    PAN-OS 10.2

    Here are our recommended system requirements for deploying the CN-Series firewall across its multiple supported modes.
    5G-Native Security is exclusively supported on Daemonset and Kubernetes CNF Mode.
    The memory and core combinations for CN-MGMT and CN-NGFW applies to Small, Medium, and Large respectively. The combination of Small, Medium, and Large pertaining to CN-MGMT maps directly with respective CN-NGFW.
    Recommended CN-Series system and Capacity Matrix
    CN ModeResourceSmallMediumMediumMediumLargeLarge
    Daemonset
    Min CN-MGMT Memory
    3G
    3G
    4G
    4G
    16G
    16G
    Min CN-NGFW Memory
    2G
    6.5G
    16G
    32G
    48G
    56G
    Recommended CN-MGMT Cores
    2
    2
    2
    4
    8
    12
    Max CN-NGFW Cores
    2
    4
    8
    16
    31
    47
    Disk
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    DPDK Hugepage Size
    N/A
    N/A
    N/A
    N/A
    N/A
    N/A
    Kubernetes Service
    Min CN-MGMT Memory
    3G
    3G
    4G
    4G
    16G
    16G
    Min CN-NGFW Memory
    4G
    6.5G
    16G
    32G
    48G
    56G
    Recommended CN-MGMT Cores
    2
    2
    2
    4
    8
    12
    Max CN-NGFW Cores
    2
    4
    8
    16
    31
    47
    Disk
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    DPDK Hugepage Size
    N/A
    N/A
    N/A
    N/A
    N/A
    N/A
    Kubernetes CNF
    Min CN-MGMT Memory
    3G
    3G
    4G
    4G
    16G
    16G
    Min CN-NGFW Memory
    2G
    6.5G
    16G
    32G
    48G
    56G
    Recommended CN-MGMT Cores
    2
    2
    2
    4
    8
    12
    Max CN-NGFW Cores
    2
    4
    8
    16
    31
    47
    Disk
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    DPDK Hugepage Size
    1G
    1G
    2G
    2G
    4G
    4G

    PAN-OS 11.1 and later

    5G-Native Security is exclusively supported on Daemonset and Kubernetes CNF Mode.
    The memory and core combinations for CN-MGMT and CN-NGFW applies to small, medium, and large respectively. The combination of Small, Medium, and Large pertaining to CN-MGMT maps directly with respective CN-NGFW.
    Recommended CN-Series system and Capacity Matrix
    CN ModeResourceSmallMediumMediumMediumLargeLarge
    Daemonset
    Min CN-MGMT Memory
    5G
    5G
    8G
    8G
    16G
    16G
    Min CN-NGFW Memory
    3G
    6.5G
    16G
    32G
    48G
    56G
    Recommended CN-MGMT Cores
    2
    2
    2
    4
    8
    12
    Max CN-NGFW Cores
    2
    4
    8
    16
    31
    47
    Disk
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    DPDK Hugepage Size
    N/A
    N/A
    N/A
    N/A
    N/A
    N/A
    Kubernetes Service
    Min CN-MGMT Memory
    5G
    5G
    8G
    8G
    16G
    16G
    Min CN-NGFW Memory
    4G
    6.5G
    16G
    32G
    48G
    56G
    Recommended CN-MGMT Cores
    2
    2
    2
    4
    8
    12
    Max CN-NGFW Cores
    2
    4
    8
    16
    31
    47
    Disk
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    DPDK Hugepage Size
    N/A
    N/A
    N/A
    N/A
    N/A
    N/A
    Kubernetes CNF
    Min CN-MGMT Memory
    5G
    5G
    8G
    8G
    16G
    16G
    Min CN-NGFW Memory
    2G
    6.5G
    16G
    32G
    48G
    56G
    Recommended CN-MGMT Cores
    2
    2
    2
    4
    8
    12
    Max CN-NGFW Cores
    2
    4
    8
    16
    31
    47
    Disk
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    52Gi
    DPDK Hugepage Size
    1G
    1G
    2G
    2G
    4G
    4G

    © 2026 Palo Alto Networks, Inc. All rights reserved.