Clamav

Clam AntiVirus is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways. It provides a number of utilities including a flexible and scalable multi-threaded daemon, a command line scanner and advanced tool for automatic database updates. The core of the package is an anti-virus engine available in a form of shared library.

ClamAV for all applications

ClamAV is not enabled by default but it’s available for all Clever Cloud applications.

Activate ClamAV

You can set the CC_CLAMAV environment variable to enable ClamAV for your application:

CC_CLAMAV=true

This variable is used to start these two services:

• clamav-daemon.service (multi-threaded daemon that uses libclamav to scan files for viruses).
• clamav-freshclam.service (used to update signature database sets to the latest version).

The signature database is updated every 2 hours.

Memory consumption

ClamAV can consume a lot of resources, make sure you have a scaler with enough memory (at least 1GB available) to avoid a complete shutdown / crash of your application (OOM).

Unix and/or TCP sockets connections

The ClamAV daemon on Clever Cloud instances listens for incoming connections on the following sockets:

Unix socket:

/run/clamav/clamd.ctl

TCP socket:

localhost:3310

Be sure to use these settings when configuring your ClamAV client.

Additional configurations

CC_CLAMAV_MAXTHREADS: Maximum number of threads running at the same time.
CC_CLAMAV_MAXQUEUE: Maximum number of queued items.

If you have special needs, you can make a request on our technical support:

• support@clever-cloud.com