Deploying File Inspection Engine: Requirements & Architecture
Hardware Requirements
To handle files of up to 2 GB, we recommend the following:
- Memory (RAM):
- Provision at least 32 GB of RAM. File processing may require up to 8 times the file size in RAM, especially to accommodate large file handling and concurrent requests.
- Disk Size:
- Allocate at least 100 GB of disk space to support scanning of larger files and threat intelligence database storage requirements.
Production Deployment
A single deployment can handle files of all sizes using multiple Spectra Core instances.
- The total number of instances is configured with
--number-of-regular-coresand--number-of-large-cores. - All instances are identical. The "large" group is simply a reserved subset of instances that only process files above the configured threshold (
--large-file-threshold). - If no large instances are configured (set to 0), all files are processed by the regular pool.
Each Spectra Core instance consumes memory even when idle (approximately 1.4 GB per instance), so factor this into your capacity planning.
This approach improves CPU utilization and throughput while keeping the deployment architecture simple.
📄️ Docker
Deploy File Inspection Engine with Docker: pull from the ReversingLabs registry, configure the license, set environment variables, and sync threat data.
📄️ Kubernetes / GKE
Deploy File Inspection Engine on Kubernetes with Helm. Covers GKE setup, chart configuration, persistent storage, and Spectra Core instance scaling.
📄️ Air-Gapped Kubernetes Deployment
How to manually deploy the application in a Kubernetes cluster without network access.
🗃️ Examples
1 item