SRA Requirements

Use this page to validate infrastructure requirements before deploying Akeyless Gateway with Secure Remote Access (SRA) and Zero Trust Web Access (ZTWA).

Port values below are default values from the official Helm charts and Docker Compose examples. Exact exposure can vary by deployment model, ingress, and service configuration.

Port Inventory

The following table lists the primary ports by component.

Outbound Connectivity

Allow outbound connectivity to the following destinations:

• Akeyless API endpoint
• Session forwarding target endpoints, when session forwarding is configured
• Recording storage endpoints (for example, S3 or Azure Blob), when RDP recording is configured

Redis Dependency

Redis cache support is required for SRA components. For Gateway-only deployments without SRA, cache is optional.

For Redis defaults and operational guidance, see Redis documentation.

Minimum Resources

Use at least 1 vCPU and 2 GiB memory for each SRA component.

Kubernetes-Specific Requirements

• Expose the SSH bastion service with type: LoadBalancer.
• Run the SSH bastion container in privileged mode.

For platform guidance, see Kubernetes Service type LoadBalancer and Linux kernel security constraints.

Docker Compose Profiles

Use Docker Compose profiles as follows:

• gateway
• sra
• metrics

For profile behavior and usage, see Docker Compose profiles.