Hot Shot Mode

Hot Shot Mode provides power and performance preferences for HookProbe edge deployments.

Overview

Edge devices often need to balance:

Performance - Maximum detection capability
Efficiency - Battery life and power consumption
Stealth - Minimal system footprint

Hot Shot Mode provides presets and fine-tuning for these tradeoffs.

Presets

Performance Mode

Maximum detection capability:

hookprobe-ctl hotshot --mode performance

Settings:

Setting	Value
CPU Governor	performance
XDP Mode	native (if supported)
Polling Interval	100ms
Log Level	DEBUG
Full IDS	Enabled

Balanced Mode (Default)

Standard operation:

hookprobe-ctl hotshot --mode balanced

Settings:

Setting	Value
CPU Governor	ondemand
XDP Mode	auto
Polling Interval	1s
Log Level	INFO
Full IDS	Enabled

Efficiency Mode

Power saving for battery operation:

hookprobe-ctl hotshot --mode efficiency

Settings:

Setting	Value
CPU Governor	powersave
XDP Mode	skb
Polling Interval	5s
Log Level	WARNING
Full IDS	Reduced

Stealth Mode

Minimal footprint:

hookprobe-ctl hotshot --mode stealth

Settings:

Setting	Value
CPU Governor	powersave
XDP Mode	disabled
Polling Interval	30s
Log Level	ERROR
Full IDS	Disabled
Mesh Updates	Reduced

CLI Usage

View Current Mode

hookprobe-ctl hotshot --status

Output:

Hot Shot Mode: balanced
──────────────────────
CPU Governor:     ondemand
XDP Mode:         native
Polling:          1000ms
Log Level:        INFO
IDS:              full
Power Draw:       ~3.5W

Set Mode

hookprobe-ctl hotshot --mode <preset>

Custom Settings

hookprobe-ctl hotshot --custom \
    --cpu-governor performance \
    --polling-interval 500 \
    --xdp-mode native

Configuration File

hotshot:
  mode: balanced

  custom:
    cpu_governor: ondemand
    polling_interval_ms: 1000
    xdp_mode: auto
    log_level: INFO
    ids_mode: full
    mesh_update_interval: 30

  schedules:
    - name: "office_hours"
      mode: performance
      cron: "0 9 * * 1-5"  # 9am weekdays

    - name: "night"
      mode: efficiency
      cron: "0 22 * * *"   # 10pm daily

Scheduled Modes

Create Schedule

schedules:
  - name: "battery_saver"
    mode: efficiency
    cron: "0 0 * * *"  # Midnight

  - name: "work_hours"
    mode: performance
    cron: "0 8 * * 1-5"  # 8am weekdays

View Schedules

hookprobe-ctl hotshot --schedules

Power Monitoring

View Power Usage

hookprobe-ctl hotshot --power

Output:

Power Statistics:
─────────────────
Current Draw:     3.2W
24h Average:      2.8W
Peak (24h):       5.1W
Battery Estimate: 12h 30m (at current draw)

Energy Anomaly Detection

Hot Shot Mode includes RAPL-based power monitoring for anomaly detection:

hookprobe-ctl metrics | grep energy

{
  "energy_anomaly": 0.12,
  "power_draw_watts": 3.2,
  "rapl_package_joules": 1234567,
  "anomaly_threshold": 0.25
}

Guardian-Specific

WiFi Power Management

guardian:
  wifi:
    power_save: true      # Enable in efficiency mode
    scan_interval: 60     # Seconds between scans

LTE Power Management

guardian:
  lte:
    sleep_mode: true
    wake_on_data: true
    idle_timeout: 300

Fortress-Specific

OVS Optimization

fortress:
  ovs:
    dpdk: false           # DPDK for max throughput
    flow_cache: 50000
    thread_count: 2

Performance Metrics

Measure Impact

# Before mode change
hookprobe-ctl metrics --filter performance > before.json

# Change mode
hookprobe-ctl hotshot --mode performance

# After (wait a few minutes)
hookprobe-ctl metrics --filter performance > after.json

Key Metrics

Metric	Description
`agent_cpu_percent`	CPU usage
`agent_memory_mb`	Memory usage
`detection_latency_ms`	Detection speed
`xdp_pps`	Packets per second

Tradeoffs

Mode	Detection	Power	Latency	Stealth
Performance	Max	High	Low	None
Balanced	Good	Medium	Medium	Low
Efficiency	Reduced	Low	High	Medium
Stealth	Minimal	Lowest	Very High	Maximum

Best Practices

Travel (Guardian)

# Hotel/Airport: Full protection
hookprobe-ctl hotshot --mode balanced

# On battery: Save power
hookprobe-ctl hotshot --mode efficiency

# Sensitive environment: Minimal footprint
hookprobe-ctl hotshot --mode stealth

Office (Fortress)

# Business hours: Full protection
hookprobe-ctl hotshot --mode performance

# Night: Reduced (with schedule)
# Configure schedules in hotshot.yaml

Research (Nexus)

# ML Training: Maximum performance
hookprobe-ctl hotshot --mode performance

# Idle: Save power
hookprobe-ctl hotshot --mode efficiency

Next Steps

Configuration - Detailed settings
Debugging - Performance issues
Monitoring - Metrics analysis