Sandbox-debug-report larger than 1Gb fails to download from WebUI [KATA Sandbox]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

Problem Description, Symptoms & Impact

When downloading large collects (sandbox-debug-report) exceeding 1Gb in size, download suddenly fails above 1Gb (at ~1 05x xxx KB).

Diagnostics

Reproducible in all browsers, is not bound to download speed, dowloaded part size is roughly 1Gb

Workaround & Solution

Workaround: download sandbox-debug-report using SCP and CLI, see  https://forum.kaspersky.com/topic/how-to-gather-sandbox-debug-report-from-terminal-katakedre-36851/

Solution:

From root, add directive

uwsgi_max_temp_file_size 0;

to the file /etc/nginx/conf.d/sandbox-ram-frontend.conf on sandbox, as follows:

/etc/nginx/conf.d/sandbox-ram-frontend.conf

location ~ ^/api/(.*) {         rewrite ^/api/(.*)$ $1 break;         uwsgi_pass              ram_backend;         uwsgi_read_timeout      900;         client_max_body_size    2048m;         include                 uwsgi_params;         uwsgi_max_temp_file_size 0;                  <---add this line     }

Apply the changes by reloading nginx configuration:

nginx -s reload

RCA

uwsgi built-in temp file size limit of 1Gb is applied unless other limit is specified directly.