Discussion board where members learn more about Qlik Sense Installation, Deployment and Management.
I found this pre-requisites for Qlik Sense in the manual on help.qlik.com:
Processors (CPUs) Multi-core x64 compatible processors. We recommend that you use at least 4 cores per node in a Qlik Analytics Platformdeployment.
Memory 8 GB minimum (depending on data volumes, more may be required)
Disk space 5.0 GB total required to install
What are the requirements for Qlik Sense in DMZ as a prozy node? The same one?
These are the 'recommended' requirements. What are you 'minimum' requirements?
Thank you. Best regards, Patrick
Those are requirements for bare bone environment ( that has no apps and 1-2 users) and including they are in fact the minimum system requirements to get QS install, anything below that, it is unsupported regardless their function or purpose.
"This section lists the requirements that must be fulfilled by the target system in order to successfully install and run Qlik Sense."
Recommendation in what sense? In sizing, I can't say for sure, maybe you can exercise by using the scalability tool:
Practically speaking Qlik Sense should not have a node in the DMZ and a node on the domain. This is due to the set of requirements which would need to be fulfilled, including but not limited to:
With these needs for a node in Qlik Sense, it is very unattractive to place it in a DMZ. There, of course, are ways to harden such a setup but that's a topic for the client's internal security team(s). From the Qlik standpoint, it's more self-evidently secure to place a reverse proxy / network appliance in front of the node intended to service external users (if they are different than the internal users) and tunnel the traffic inside the firewall.
Ok, thank you for your explanation. This is new to me/us.
We like to set up the enviroment, explained on this support.qlik website: https://support.qlik.com/articles/000033939
@Levi_Turner : From your point of view, you would not set the enviroment like this? In case, you would do so, which requirements of the Prozy node would you recommend?
@pwagner : No, I would not. I just do not see a reason why SMB traffic + a litany of ports is considered more secure than 443 over a reverse proxy. Ultimately it is an individual customer's decision, but I have come across very few who opt for the DMZ style deployment once the requirements for that type of deployments are presented.
I'd first see if there's already a network appliance used in the customer's environment. It can be something as sophisticated as an F5 Load Balancer, down to using Apache / Nginx / IIS as a reverse proxy.
The best situation is to use existing investment and experience rather than standing up something new.
The article is for IIS. But there are others for other software pages, e.g. Nginx.