CN-Series System Requirements for the Kubernetes Cluster
Focus
Focus
CN-Series

CN-Series System Requirements for the Kubernetes Cluster

Table of Contents

CN-Series System Requirements for the Kubernetes Cluster

Where Can I Use This?What Do I Need?
  • CN-Series deployment
  • CN-Series 10.1.x or above Container Images
  • Panorama running PAN-OS 10.1.x or above version
  • Helm 3.6 or above version client for CN-Series deployment with Helm
Here are recommended system requirements for deploying the CN-Series across its multiple supported modes:

PAN-OS 10.1

The following table shows the system requirements for the cluster on which the CN-Series is deployed. These values are general guidelines for CPU, memory, and disk storage; the amount of resources you deploy might vary depending on your needs.
The CN-Series Medium is not available for the CN-Series as a Daemonset.
Resource
CN-MGMT-Small
CN-NGFW-Small
CN-MGMT-Medium
CN-NGFW-Medium
CN-MGMT-Large
CN-NGFW-Large
Memory (Minimum)
3GB
  • 2GB (Daemonset)
  • 2.5GB (K8s Service)
3GB
6GB
4GB
48GB
CPU Min
2 (Recommended)
2 (Recommended)
2 (Recommended)
4 (Recommended)
4 (Recommended)
12 (Recommended)
CPU Max
N/A
31
N/A
31
N/A
31
Disk
50GB
N/A
50GB
N/A
50GB
N/A

PAN-OS 10.2

Here are our recommended system requirements for deploying the CN-Series firewall across its multiple supported modes.
5G-Native Security is exclusively supported on Daemonset and Kubernetes CNF Mode.
The memory and core combinations for CN-MGMT and CN-NGFW applies to Small, Medium, and Large respectively. The combination of Small, Medium, and Large pertaining to CN-MGMT maps directly with respective CN-NGFW.
Recommended CN-Series system and Capacity Matrix
CN ModeResourceSmallMediumMediumMediumLargeLarge
Daemonset
Min CN-MGMT Memory
3G
3G
4G
4G
16G
16G
Min CN-NGFW Memory
2G
6.5G
16G
32G
48G
56G
Recommended CN-MGMT Cores
2
2
2
4
8
12
Max CN-NGFW Cores
2
4
8
16
31
47
Disk
52Gi
52Gi
52Gi
52Gi
52Gi
52Gi
DPDK Hugepage Size
N/A
N/A
N/A
N/A
N/A
N/A
Kubernetes Service
Min CN-MGMT Memory
3G
3G
4G
4G
16G
16G
Min CN-NGFW Memory
4G
6.5G
16G
32G
48G
56G
Recommended CN-MGMT Cores
2
2
2
4
8
12
Max CN-NGFW Cores
2
4
8
16
31
47
Disk
52Gi
52Gi
52Gi
52Gi
52Gi
52Gi
DPDK Hugepage Size
N/A
N/A
N/A
N/A
N/A
N/A
Kubernetes CNF
Min CN-MGMT Memory
3G
3G
4G
4G
16G
16G
Min CN-NGFW Memory
2G
6.5G
16G
32G
48G
56G
Recommended CN-MGMT Cores
2
2
2
4
8
12
Max CN-NGFW Cores
2
4
8
16
31
47
Disk
52Gi
52Gi
52Gi
52Gi
52Gi
52Gi
DPDK Hugepage Size
1G
1G
2G
2G
4G
4G

PAN-OS 11.1 and later

5G-Native Security is exclusively supported on Daemonset and Kubernetes CNF Mode.
The memory and core combinations for CN-MGMT and CN-NGFW applies to small, medium, and large respectively. The combination of Small, Medium, and Large pertaining to CN-MGMT maps directly with respective CN-NGFW.
Recommended CN-Series system and Capacity Matrix
CN ModeResourceSmallMediumMediumMediumLargeLarge
Daemonset
Min CN-MGMT Memory
5G
5G
8G
8G
16G
16G
Min CN-NGFW Memory
2G
6.5G
16G
32G
48G
56G
Recommended CN-MGMT Cores
2
2
2
4
8
12
Max CN-NGFW Cores
2
4
8
16
31
47
Disk
52Gi
52Gi
52Gi
52Gi
52Gi
52Gi
DPDK Hugepage Size
N/A
N/A
N/A
N/A
N/A
N/A
Kubernetes Service
Min CN-MGMT Memory
5G
5G
8G
8G
16G
16G
Min CN-NGFW Memory
4G
6.5G
16G
32G
48G
56G
Recommended CN-MGMT Cores
2
2
2
4
8
12
Max CN-NGFW Cores
2
4
8
16
31
47
Disk
52Gi
52Gi
52Gi
52Gi
52Gi
52Gi
DPDK Hugepage Size
N/A
N/A
N/A
N/A
N/A
N/A
Kubernetes CNF
Min CN-MGMT Memory
5G
5G
8G
8G
16G
16G
Min CN-NGFW Memory
2G
6.5G
16G
32G
48G
56G
Recommended CN-MGMT Cores
2
2
2
4
8
12
Max CN-NGFW Cores
2
4
8
16
31
47
Disk
52Gi
52Gi
52Gi
52Gi
52Gi
52Gi
DPDK Hugepage Size
1G
1G
2G
2G
4G
4G