Skip to main content
Lumos Gate Docs

Supported OS

Lumos Gate agent supports Debian 12+ and Ubuntu 24.04+ on x86_64 and arm64. Full compatibility list with system requirements and recommended versions.

Supported Distributions

The Lumos Gate agent supports Debian 12+ and Ubuntu 24.04+ LTS.

DistributionVersionCodenameStatus
Debian12BookwormSupported (recommended)
Debian13TrixieSupported
Ubuntu24.04 LTSNoble NumbatSupported (recommended)

Recommendation: For new deployments, use Debian 12 or Ubuntu 24.04 LTS. These are the most widely tested and recommended.

The installer checks /etc/os-release for Debian or Ubuntu specifically. Other Debian-based distributions (Linux Mint, Pop!_OS, etc.) are not officially tested or supported.

Architecture

ArchitectureIdentifierStatus
x86_64amd64Primary supported architecture
AArch64arm64 / aarch64Fully supported

The installer auto-detects your architecture and downloads the correct binary. 32-bit architectures are not supported.

System Requirements

Kernel

All supported distributions ship with Linux 5.15+, which meets the minimum requirement. Linux 6.1+ is recommended for the best WireGuard performance (origin tunnels).

Memory

RequirementRAMNotes
Minimum512 MBAgent + HAProxy with light traffic
Recommended1 GB+Production workloads with WAF, bot protection, and multiple domains
High traffic2 GB+Hundreds of concurrent connections, multiple domains with full WAF

The agent binary uses approximately 20-30 MB of RAM. Most memory is consumed by HAProxy.

Disk

A standard VPS with 10 GB+ disk space is more than enough. The agent binary is ~10 MB, HAProxy ~5 MB, and configs/certs are negligible.

Network

DirectionPortProtocolPurpose
Outbound443WSSAgent connects to Lumos WS server for config sync and metrics
Inbound80HTTPACME HTTP-01 SSL challenges + HTTP traffic/redirect
Inbound443HTTPSProduction HTTPS traffic proxying

Note: The agent makes an outbound WebSocket connection. You do not need to open any special inbound ports for agent communication. Only standard web ports (80, 443) are needed.

Software Dependencies

HAProxy

HAProxy 2.6+ is required (2.8+ LTS recommended). The agent installer installs it automatically if not present. Lua support is required for WAF and bot protection.

If HAProxy is already installed, the installer detects it, shows existing config statistics, and asks for confirmation. The existing configuration is backed up. See Detected Sites for importing existing HAProxy configurations.

systemd

The agent runs as a systemd service (lumos-agent.service). All supported distributions use systemd by default.

curl

Required for the installation script. Available by default on all supported distributions.

Root Access

Root access (or sudo) is required. The agent needs elevated privileges to manage HAProxy, bind to ports 80/443, write SSL certificates, apply kernel tuning, and register as a systemd service.

curl -fsSL https://get.lumosgate.com/install | LUMOS_TOKEN=YOUR_TOKEN sudo -E bash

Edge Setup (Kernel Tuning)

During installation, the agent runs edge-setup.sh which applies kernel-level optimizations for high-performance proxying (BBR congestion control, increased connection backlog, huge pages, conntrack tuning, raised file descriptor limits, optimized network buffers).

All tunings persist across reboots via /etc/sysctl.d/.

To skip kernel tuning (e.g., on a shared server or if you manage your own parameters):

curl -fsSL https://get.lumosgate.com/install | LUMOS_TOKEN=YOUR_TOKEN LUMOS_NO_TUNE=1 bash

Virtualization Compatibility

VirtualizationSupportedNotes
KVMYes (recommended)Full kernel access, all tunings work
Bare metalYes (recommended)Best performance
Xen HVMYesFull kernel access
VMwareYesFull kernel access
Hyper-VYesFull kernel access
OpenVZLimitedMay lack kernel access for tuning; use LUMOS_NO_TUNE=1
LXC / LXDLimitedShared kernel, sysctl tunings may not apply; use LUMOS_NO_TUNE=1

Note: Use KVM-based VPS instances when possible. Most providers use KVM by default.

Verifying Your System

Before installing the agent:

# Check OS and version
cat /etc/os-release

# Check architecture (should be x86_64 or aarch64)
uname -m

# Check kernel version (should be 5.15+)
uname -r

# Check available memory
free -h

# Check available disk space
df -h /

# Check if systemd is running
systemctl is-system-running

# Check if ports 80/443 are available
ss -tlnp | grep -E ':80|:443'

If ports 80 or 443 are in use by another service, stop or remove it before installing. See Troubleshooting for details.

Next Steps