Supported OS
Lumos Gate agent supports Debian 12+ and Ubuntu 24.04+ on x86_64 and arm64. Full compatibility list with system requirements and recommended versions.
Supported Distributions
The Lumos Gate agent supports Debian 12+ and Ubuntu 24.04+ LTS.
| Distribution | Version | Codename | Status |
|---|---|---|---|
| Debian | 12 | Bookworm | Supported (recommended) |
| Debian | 13 | Trixie | Supported |
| Ubuntu | 24.04 LTS | Noble Numbat | Supported (recommended) |
Recommendation: For new deployments, use Debian 12 or Ubuntu 24.04 LTS. These are the most widely tested and recommended.
The installer checks /etc/os-release for Debian or Ubuntu specifically. Other Debian-based distributions (Linux Mint, Pop!_OS, etc.) are not officially tested or supported.
Architecture
| Architecture | Identifier | Status |
|---|---|---|
| x86_64 | amd64 | Primary supported architecture |
| AArch64 | arm64 / aarch64 | Fully supported |
The installer auto-detects your architecture and downloads the correct binary. 32-bit architectures are not supported.
System Requirements
Kernel
All supported distributions ship with Linux 5.15+, which meets the minimum requirement. Linux 6.1+ is recommended for the best WireGuard performance (origin tunnels).
Memory
| Requirement | RAM | Notes |
|---|---|---|
| Minimum | 512 MB | Agent + HAProxy with light traffic |
| Recommended | 1 GB+ | Production workloads with WAF, bot protection, and multiple domains |
| High traffic | 2 GB+ | Hundreds of concurrent connections, multiple domains with full WAF |
The agent binary uses approximately 20-30 MB of RAM. Most memory is consumed by HAProxy.
Disk
A standard VPS with 10 GB+ disk space is more than enough. The agent binary is ~10 MB, HAProxy ~5 MB, and configs/certs are negligible.
Network
| Direction | Port | Protocol | Purpose |
|---|---|---|---|
| Outbound | 443 | WSS | Agent connects to Lumos WS server for config sync and metrics |
| Inbound | 80 | HTTP | ACME HTTP-01 SSL challenges + HTTP traffic/redirect |
| Inbound | 443 | HTTPS | Production HTTPS traffic proxying |
Note: The agent makes an outbound WebSocket connection. You do not need to open any special inbound ports for agent communication. Only standard web ports (80, 443) are needed.
Software Dependencies
HAProxy
HAProxy 2.6+ is required (2.8+ LTS recommended). The agent installer installs it automatically if not present. Lua support is required for WAF and bot protection.
If HAProxy is already installed, the installer detects it, shows existing config statistics, and asks for confirmation. The existing configuration is backed up. See Detected Sites for importing existing HAProxy configurations.
systemd
The agent runs as a systemd service (lumos-agent.service). All supported distributions use systemd by default.
curl
Required for the installation script. Available by default on all supported distributions.
Root Access
Root access (or sudo) is required. The agent needs elevated privileges to manage HAProxy, bind to ports 80/443, write SSL certificates, apply kernel tuning, and register as a systemd service.
curl -fsSL https://get.lumosgate.com/install | LUMOS_TOKEN=YOUR_TOKEN sudo -E bashEdge Setup (Kernel Tuning)
During installation, the agent runs edge-setup.sh which applies kernel-level optimizations for high-performance proxying (BBR congestion control, increased connection backlog, huge pages, conntrack tuning, raised file descriptor limits, optimized network buffers).
All tunings persist across reboots via /etc/sysctl.d/.
To skip kernel tuning (e.g., on a shared server or if you manage your own parameters):
curl -fsSL https://get.lumosgate.com/install | LUMOS_TOKEN=YOUR_TOKEN LUMOS_NO_TUNE=1 bashVirtualization Compatibility
| Virtualization | Supported | Notes |
|---|---|---|
| KVM | Yes (recommended) | Full kernel access, all tunings work |
| Bare metal | Yes (recommended) | Best performance |
| Xen HVM | Yes | Full kernel access |
| VMware | Yes | Full kernel access |
| Hyper-V | Yes | Full kernel access |
| OpenVZ | Limited | May lack kernel access for tuning; use LUMOS_NO_TUNE=1 |
| LXC / LXD | Limited | Shared kernel, sysctl tunings may not apply; use LUMOS_NO_TUNE=1 |
Note: Use KVM-based VPS instances when possible. Most providers use KVM by default.
Verifying Your System
Before installing the agent:
# Check OS and version
cat /etc/os-release
# Check architecture (should be x86_64 or aarch64)
uname -m
# Check kernel version (should be 5.15+)
uname -r
# Check available memory
free -h
# Check available disk space
df -h /
# Check if systemd is running
systemctl is-system-running
# Check if ports 80/443 are available
ss -tlnp | grep -E ':80|:443'If ports 80 or 443 are in use by another service, stop or remove it before installing. See Troubleshooting for details.
Next Steps
- Quick Start -- Install the agent on your first VPS
- Agent Installation -- Detailed installation guide
- VPS Providers -- Recommended DDoS-protected VPS providers
- Detected Sites -- Import existing HAProxy configurations
- Troubleshooting -- Solutions for common issues