You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have been using Prowler CLI for a while now to assess number of environments and it always worked really well.
Yesterday, I wanted to give a try using Prowler App instead. I have deployed it using docker on a Debian instance with 8vCPU and 32GB of RAM. The scans performed by Prowler App on small environments work exceptionally well (less than 4 minutes); however, on environments with dozens of thousands of resources, the scans are going to hang forever at 7%, whereas Prowler CLI takes a couple of minutes to scan the exact same environments on lower spec systems.
Expected behavior
Prowler app running just as smooth as Prowler CLI.
Actual Result with Screenshots or Logs
N/A
How did you install Prowler?
Docker (docker pull toniblyx/prowler)
Environment Resource
EC2 instance (t2.2xlarge) - 8vCPU and 32GB
Debian GNU/Linux 12
OS used
Debian GNU/Linux 12
Prowler version
Latest
Pip version
N/A
Context
No response
The text was updated successfully, but these errors were encountered:
After further investigation, on an environment with 47,000 resources, it took:
16 minutes with Prowler CLI (default configuration)
90 minutes with Prowler App (default configuration)
I am keen to understand why such a big difference and whether Prowler App relies on the same configuration as Prowler CLI to scan? If not, is it possible to increase performance so that Prowler App takes as much time as Prowler CLI
Yes, it’s expected that scans take a bit longer in the app compared to the CLI. The app runs as a full system with multiple components and services (including data persistence, aggregations, and inter-service communication) which naturally introduces some overhead.
If both tests were run on the same machine, there are a few factors to consider: each service consumes CPU and RAM, and communication between services can cause additional delays.
That said, the metrics you shared do seem unusually high. We’ll definitely look into this and work on improving it, since those differences shouldn’t be that large under normal circumstances.
Thanks for reporting this and sharing such useful and interesting data with us!
Steps to Reproduce
Hi,
I have been using Prowler CLI for a while now to assess number of environments and it always worked really well.
Yesterday, I wanted to give a try using Prowler App instead. I have deployed it using docker on a Debian instance with 8vCPU and 32GB of RAM. The scans performed by Prowler App on small environments work exceptionally well (less than 4 minutes); however, on environments with dozens of thousands of resources, the scans are going to hang forever at 7%, whereas Prowler CLI takes a couple of minutes to scan the exact same environments on lower spec systems.
Expected behavior
Prowler app running just as smooth as Prowler CLI.
Actual Result with Screenshots or Logs
N/A
How did you install Prowler?
Docker (docker pull toniblyx/prowler)
Environment Resource
EC2 instance (t2.2xlarge) - 8vCPU and 32GB
Debian GNU/Linux 12
OS used
Debian GNU/Linux 12
Prowler version
Latest
Pip version
N/A
Context
No response
The text was updated successfully, but these errors were encountered: