Processing Modes
    • PDF

    Processing Modes

    • PDF

    Article summary

    We understand that not all processing scenarios are the same when it comes to the CDR processing. That's why Constellations offers customisation options, allowing you to have full control over the outcomes.

    With the CDR Enabler service, you have the flexibility to configure the following processing modes according to your preferences:

    1. Express Mode: When your use case values speed, Express mode is the ideal choice. It ensures a quick and efficient CDR process, delivering prompt results. With Express mode, Constellations will make a quicker decision on a file based on its extension rather than using Glasswall's true file type detection.
    2. Archive Mode: For a more comprehensive approach of Archives, Detailed Archive mode allows you to process archives at a more granular level ensuring that your output is as accurate as it can be
    3. Guaranteed Mode: In Glasswall Halo, the API and Engine service may be executed in Guaranteed Mode to ensure that all pods assigned to a node were equipped with the necessary resources.

    Express Mode

    For a seamless experience, send only the file types that are supported for processing. With Express Mode, you have the freedom to enable it alongside both Basic and Detailed Archive Modes.

    ExpressModeEnabled is set to false by default.

    Disabled

    While Express Mode is disabled, all files under the maximum file size are sent to Glasswall Halo. This means the Embedded Engine is responsible for determining the file type, significantly reducing the risk of any supported files being mistakenly quarantined. With this option disabled more compute resources are used per scan.

    Enabled

    When you activate Express Mode, files are sent for CDR processing if their file extension aligns with our extensive list of supported file types.

    By doing so, we eliminate the need for the Embedded Engine to determine the file type, freeing up valuable system resources. However, it's important to note that relying solely on file extensions may not always guarantee accuracy. Some files could potentially disguise themselves as different file types or even lack a file extension altogether.

    Archive Mode

    Unlock valuable insights about the quarantine status of archive files with detailed archive processing.

    ArchiveMode is set to basic by default.

    Basic

    With ArchiveMode set to basic, you'll have streamlined processing and improved resource utilization for archives. This optimised setting allows for faster operations while saving valuable system resources. However, it's important to note that selecting this option may result in less detailed quarantine information for individual files within the archive.

    ScenarioClean ContainerQuarantine Container
    All files within the archive are successfully rebuilt by GlasswallRebuilt archive file returned by Glasswall will be stored. It contains all the files that are rebuilt.None
    At least one file within the archive is not rebuilt by GlasswallNoneQuarantine report with any errors at the archive level will be stored.

    Detailed

    Gain valuable insights into the contents of archives with ArchiveMode set to detailed. By opting for this setting, you'll receive comprehensive quarantine information for each entry within the archive. While selecting this option may slightly increase processing time and resource usage, it ensures that you have a fuller and more accurate picture of any potential threats lurking within the archive.

    ScenarioClean ContainerQuarantine Container
    All files within the archive are successfully rebuilt by GlasswallRebuilt archive file returned by Glasswall will be stored. It contains all the files that are rebuilt.None
    Glasswall response contains a mix of rebuilt and failed files in the archiveRebuilt archive file returned by Glasswall will be stored. It contains all the files that are rebuilt and placeholder files (.txt appended to the original file name) with reason for the failed/errored files.Archive file containing the quarantine reports for each of the failed/errored files will be stored. Archive file will follow the same nested structure as source.
    Glasswall response does not contain any rebuilt but only has failed/errored files.NoneArchive file containing the quarantine reports for each of the failed/errored files will be stored. Archive file will follow the same nested structure as source.
    Glasswall response does not contain any rebuilt files or analysis reports but only contains errors for the archiveNoneQuarantine report with errors at the archive level will be stored.

    Guaranteed Mode

    Given that the Glasswall engine requires varying amounts of RAM and CPU, depending on the file's complexity, running in guaranteed mode guarantees sufficient memory for each file's processing. This approach minimizes the risk of a pod running out of memory during execution.


    Was this article helpful?