Documentation repository for the Glasswall ICAP program

In order to see kanban board please download this extension: https://www.zenhub.com/extension

filetrust/c-icap : This repo contains the proof of concept implementation. The ICAP solution is deployed within a docker container, with the Glasswall SDK integrated.

The cloud deployment is implemented through the integration of the services provided by a number of repos.

filetrust/mvp-icap-service This provides the ICAP Server and Glasswall ICAP Resource. These components are responsible for providing the ICAP interface and submitting the content received in ICAP Requests for processing through the Glasswall products.

filetrust/icap-service-metrics-exporter Sidecar for the mvp-icap-service. Calls the 'info' service of C-ICAP, converts statistics into Prometheus metrics and creates '/metrics' port for Prometheus to scrape from.

filetrust/mvp-icap-cloud This provides the Orchestrator that co-ordinates the processing of content received by the ICAP Server.

filetrust/rebuild-k8s-filetypedetection This provides the source code for the File Type Detection API used during ICAP processing.

filetrust/rebuild-k8s This provides the deployment scripts for the ICAP services being deployed to a Kubernetes Cluster.

filetrust/event-submission-service This facilitates the upload of transaction event and analysis report to the Azure File Share.

filetrust/icap-adaptation-service This provides the Orchestration that co-ordinates the processing of content received by the ICAP on a Kubernetes environment.

filetrust/icap-management-ui This provides the service for a management UI used to configure the Adaptation policy and display metrics from the ICAP service, as well as a log/history of transactions.

filetrust/icap-request-processing This provides the rebuild functionality for the ICAP offering.

filetrust/pod-janitor This provides cleaning of Failed & Succeeded pods in the cluster.

filetrust/transaction-event-api This is the API that handles transaction searches on the event store. The swagger deployment can be found here

replaced with:

filetrust/transaction-query-service This is an API that lives on each of the adaptation clusters to serve transactional data.

filetrust/transaction-query-aggregator This is an API that lives on the administration cluster to aggregate and serve transactional data from each of the 'transaction-query-service' endpoints.

filetrust/transaction-event-api-static-data This is a tool that populates static data for the transaction-event-api

filetrust/policy-management-api This is the API that handles operations on the Adaption Policy.

filetrust/pod-janitor This is a maintenance pod responsible for identifying and disposing of completed request processing pods.

filetrust/icap-infrastructure A central repository for all helm charts of application and 3rd party services.

filetrust/policy-update-service This handles the update to the Adaptation Policy Configmap.

filetrust/ncfs-policy-update-service This handles the update to the NCFS Policy Configmap.

filetrust/archive-adaptation-service This provides the orchestration that co-ordinates the processing of archive files.

filetrust/archive-processing This process facilitates the unpacking, sending off adaptation requests and repacking of archive files.

filetrust/reference-ncfs This process is a reference for the Non-Compliant file service. It decides the action to take when a file is considered non-compliant.

The program's Threat Model is recorded as ICAP Threat Model Cloud Deployment The model's diagram is here