summaryrefslogtreecommitdiff
path: root/bin
diff options
context:
space:
mode:
authorzhangchengwei <[email protected]>2018-12-09 22:11:46 +0800
committerzhangchengwei <[email protected]>2018-12-09 22:11:46 +0800
commite75fb26213ce53bf6a9b02a135ff08f45b7d7187 (patch)
tree36f161ec3de611e889950f8a657b6ef78a887e4b /bin
parentae6fa8fe3910e04f5936b476f1120a8548d5bcbe (diff)
支持WiredCFG获取配置;支持直接生效表串联设备生效范围;调整最新的库表名列表;
Diffstat (limited to 'bin')
-rw-r--r--bin/conf/maat_table_info.conf24
-rw-r--r--bin/conf/maat_table_info.conf.lnkbin0 -> 1277 bytes
-rw-r--r--bin/conf/maat_table_info_tag.conf21
-rw-r--r--bin/conf/maat_table_info_valid.conf21
-rw-r--r--bin/conf/pangu_valve.conf58
-rw-r--r--bin/conf/table_info/maat_info.conf6
-rw-r--r--bin/conf/table_info/service_id_map.conf58
-rw-r--r--bin/conf/table_info/service_id_map_test.conf3
-rw-r--r--bin/conf/table_info/table_info_one.conf2
-rw-r--r--bin/conf/table_info/table_info_tree.conf2
-rw-r--r--bin/pangu_valvebin602530 -> 603472 bytes
-rw-r--r--bin/pangu_valve_testbin606097 -> 607080 bytes
12 files changed, 141 insertions, 54 deletions
diff --git a/bin/conf/maat_table_info.conf b/bin/conf/maat_table_info.conf
deleted file mode 100644
index 3e96996..0000000
--- a/bin/conf/maat_table_info.conf
+++ /dev/null
@@ -1,24 +0,0 @@
-#each collumn seperate with '\t'
-#id (0~65535(
-#name string
-#type one of ip,expr,compile or plugin
-#src_charset one of GBK,BIG5,UNICODE,UTF8
-#dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/'
-#do_merege yes or no
-#id name type IS_VALID_INDEX
-0 APP_DOMAIN plugin {"valid":7,"tag":11}
-1 APP_DYN_SEV_IP_CB plugin {"valid":9,"tag":10}
-2 APP_POLICY plugin {"valid":7,"tag":11}
-3 APP_STATIC_SEV_IP plugin {"valid":14,"tag":18}
-4 LIMIT_DOMAIN plugin {"valid":7,"tag":11}
-5 LIMIT_DYN_IP_CB plugin {"valid":9,"tag":10}
-6 PXY_DYN_SEV_IP_CB plugin {"valid":9,"tag":10}
-7 PXY_INTERCEPT_DOMAIN plugin {"valid":7,"tag":11}
-8 LIMIT_IP plugin {"valid":14,"tag":18}
-9 PXY_INTERCEPT_IP plugin {"valid":14,"tag":18}
-10 INLINE_IP_CB plugin {"valid":14,"tag":18}
-11 IR_STATIC_IP_POOL_CB plugin {"valid":9,"tag":12}
-12 DK_CLI_IP_CB plugin {"valid":14,"tag":18}
-13 IPD_DYN_SUBSCIBE_IP plugin {"valid":9,"tag":12}
-14 IR_DYN_SIFT_IP plugin {"valid":9,"tag":12}
-15 ANTI_DDOS_ATTACK_CB plugin {"valid":14,"tag":18}
diff --git a/bin/conf/maat_table_info.conf.lnk b/bin/conf/maat_table_info.conf.lnk
new file mode 100644
index 0000000..c362838
--- /dev/null
+++ b/bin/conf/maat_table_info.conf.lnk
Binary files differ
diff --git a/bin/conf/maat_table_info_tag.conf b/bin/conf/maat_table_info_tag.conf
new file mode 100644
index 0000000..80cb161
--- /dev/null
+++ b/bin/conf/maat_table_info_tag.conf
@@ -0,0 +1,21 @@
+#each collumn seperate with '\t'
+#id (0~65535(
+#name string
+#type one of ip,expr,compile or plugin
+#src_charset one of GBK,BIG5,UNICODE,UTF8
+#dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/'
+#do_merege yes or no
+#id name type IS_VALID_INDEX
+0 APP_DOMAIN plugin {"valid":7,"tag":11}
+1 APP_DYN_SEV_IP_CB plugin {"valid":9,"tag":10}
+2 APP_POLICY plugin {"valid":7,"tag":11}
+3 APP_STATIC_SEV_IP plugin {"valid":14,"tag":18}
+4 PXY_DYN_SEV_IP_CB plugin {"valid":9,"tag":10}
+5 PXY_INTERCEPT_DOMAIN plugin {"valid":7,"tag":11}
+6 PXY_INTERCEPT_IP plugin {"valid":14,"tag":18}
+7 INLINE_IP_CB plugin {"valid":14,"tag":18}
+8 IR_INTERCEPT_IP plugin {"valid":14,"tag":18}
+9 DK_CLI_IP_CB plugin {"valid":14,"tag":18}
+10 IPD_DYN_SUBSCIBE_IP plugin {"valid":9,"tag":12}
+11 ANTI_DDOS_ATTACK_CB plugin {"valid":14,"tag":18}
+12 MM_DYN_VOIP_DROP plugin {"valid":14,"tag":18}
diff --git a/bin/conf/maat_table_info_valid.conf b/bin/conf/maat_table_info_valid.conf
new file mode 100644
index 0000000..ef6242e
--- /dev/null
+++ b/bin/conf/maat_table_info_valid.conf
@@ -0,0 +1,21 @@
+#each collumn seperate with '\t'
+#id (0~65535(
+#name string
+#type one of ip,expr,compile or plugin
+#src_charset one of GBK,BIG5,UNICODE,UTF8
+#dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/'
+#do_merege yes or no
+#id name type IS_VALID_INDEX
+0 APP_DOMAIN plugin 7
+1 APP_DYN_SEV_IP_CB plugin 9
+2 APP_POLICY plugin 7
+3 APP_STATIC_SEV_IP plugin 14
+4 PXY_DYN_SEV_IP_CB plugin 9
+5 PXY_INTERCEPT_DOMAIN plugin 7
+6 PXY_INTERCEPT_IP plugin 14
+7 INLINE_IP_CB plugin 14
+8 IR_INTERCEPT_IP plugin 14
+9 DK_CLI_IP_CB plugin 14
+10 IPD_DYN_SUBSCIBE_IP plugin 9
+11 ANTI_DDOS_ATTACK_CB plugin 14
+12 MM_DYN_VOIP_DROP plugin 14
diff --git a/bin/conf/pangu_valve.conf b/bin/conf/pangu_valve.conf
index 06ebc99..c47ab51 100644
--- a/bin/conf/pangu_valve.conf
+++ b/bin/conf/pangu_valve.conf
@@ -1,32 +1,40 @@
-[SYSTEM]
-C3_AUTH_DATA=B9840E2442951834
-C3_CCC_LISTS=10.3.48.1:10005;
-
-HASH_TABLE_SIZE=8388608
-SW_HNODE_TIMEOUT_MIN=1
-#1-file; 2-redis
-MAAT_CONFIG_RECV_WAY=2
-MAAT_TABLE_INFO_PATH=./conf/maat_table_info.conf
-#MAAT_EFFECTIVE_RANGE={}
+[WIRED_INFO]
+APP_NAME=PANGU_VALVE_CONF
+SELF_IP=10.4.20.161
+REMOTE_DIR=ASTANA
+KEY_CNT=23
+RAWFILE_CNT=2
+WIRED_TIME=2018-12-09T19:48:31
-CONSUL_SWITCH=0
-CONSUL_REQ_TIMEOUT=4
-CONSUL_LOCK_DELAY=5
-CONSUL_SESSION_TTL=10
-CONSUL_LEADER_KEY=PANGU_VALVE/valve_leader01
-CONSUL_WIREDCFG_APPNAME=PANGU_VALVE/CFG_AKA
-LOCAL_NET_NAME=eth2
-SERVICE_TOPLIMIT_SW=0
+[WIRED_RAW_FILE]
+MAAT_REDIS_INFO.conf=./PANGU_VALVE_CONF_rawfile/MAAT_REDIS_INFO.conf
+SERVICE_ID_MAP.conf=./PANGU_VALVE_CONF_rawfile/SERVICE_ID_MAP.conf
[LOG]
-RUN_LOG_DIR=./log
-RUN_LOG_LV=10
-#ASMIS_PROC_NAME=PANGU/valve
+#ASMIS_PROC_NAME=Pangu/PanguValve
#ASMIS_HEART_INTERVAL=10
-FS_STAT_APPNAME=PANGU_VALVE
-STATISTIC_INTERVAL=60
-FS_STAT_MODE=1
-FS_STAT_DST_IP=10.172.128.2
+FS_STAT_APPNAME=ValveAstana
+FS_STAT_DST_IP=10.4.20.204
FS_STAT_DST_PORT=8125
+FS_STAT_MODE=1
FS_STAT_TRIG=1
+RUN_LOG_DIR=./log
+RUN_LOG_LV=10
+STATISTIC_INTERVAL=60
+[SYSTEM]
+C3_AUTH_DATA=B9840E2442951834
+C3_CCC_LISTS=10.4.34.1:10005;10.4.34.2:10005;10.4.34.3:10005;
+CONSUL_LEADER_KEY=PanguValve/ValveLeader01
+CONSUL_LOCK_DELAY=5
+CONSUL_REQ_TIMEOUT=4
+CONSUL_SESSION_TTL=10
+#MAAT_EFFECTIVE_RANGE={"tags":[{"tag":"location","value":"Astana"}]}
+CONSUL_SWITCH=1
+HASH_TABLE_SIZE=16777216
+LOCAL_NET_NAME=eth2
+#1-file; 2-redis
+MAAT_CONFIG_RECV_WAY=2
+MAAT_TABLE_INFO_PATH=./conf/maat_table_info.conf
+SERVICE_TOPLIMIT_SW=0
+SW_HNODE_TIMEOUT_MIN=1
diff --git a/bin/conf/table_info/maat_info.conf b/bin/conf/table_info/maat_info.conf
index d0eeeee..d363f08 100644
--- a/bin/conf/table_info/maat_info.conf
+++ b/bin/conf/table_info/maat_info.conf
@@ -1,6 +1,6 @@
#INS_NAME MAAT_ROOT VERSION_FILE REDIS_IP RPORT RINDEX TABLE_NAMES_LIST
-STATIC ./conf/maat_cfg1/ ./conf/version_static.txt 10.3.34.1 6379 5 APP_POLICY;APP_DOMAIN;PXY_INTERCEPT_DOMAIN;LIMIT_DOMAIN;APP_STATIC_SEV_IP;LIMIT_IP;PXY_INTERCEPT_IP;INLINE_IP_CB;IR_STATIC_IP_POOL_CB
-DYNAMIC1 ./conf/maat_cfg2/ ./conf/version_dynamic2.txt 10.3.47.1 6379 0 ANTI_DDOS_ATTACK_CB;IR_DYN_SIFT_IP
-DYNAMIC2 ./conf/maat_cfg2/ ./conf/version_dynamic2.txt 10.3.47.1 6379 1 APP_DYN_SEV_IP_CB;PXY_DYN_SEV_IP_CB;LIMIT_DYN_IP_CB;IPD_DYN_SUBSCIBE_IP
+STATIC ./conf/maat_cfg1/ ./conf/version_static.txt 10.3.34.1 6379 5 APP_POLICY;APP_DOMAIN;PXY_INTERCEPT_DOMAIN;APP_STATIC_SEV_IP;PXY_INTERCEPT_IP;INLINE_IP_CB
+DYNAMIC1 ./conf/maat_cfg2/ ./conf/version_dynamic2.txt 10.3.47.1 6379 0 ANTI_DDOS_ATTACK_CB;IR_INTERCEPT_IP;MM_DYN_VOIP_DROP
+DYNAMIC2 ./conf/maat_cfg2/ ./conf/version_dynamic2.txt 10.3.47.1 6379 1 APP_DYN_SEV_IP_CB;PXY_DYN_SEV_IP_CB;IPD_DYN_SUBSCIBE_IP
DYNAMIC3 ./conf/maat_cfg2/ ./conf/version_dynamic3.txt 10.3.47.1 6379 2 DK_CLI_IP_CB
diff --git a/bin/conf/table_info/service_id_map.conf b/bin/conf/table_info/service_id_map.conf
new file mode 100644
index 0000000..fd9610a
--- /dev/null
+++ b/bin/conf/table_info/service_id_map.conf
@@ -0,0 +1,58 @@
+#service_id limit_rate grule_serv_type RULE_SCOPE limit_num
+#INLINE_IP_CB DROP
+3 0 10 1 1000
+#ANTIDDOS DROP
+5 0 7 1 1000
+#INLINE_IP_CB DROP IPSEC/GRE 0x19/0x1C
+25 0 10 1 1000
+28 0 10 1 1000
+
+#MM_DYN_VOIP_DROP DROP 0x112
+274 0 9 1 1000
+#IR_INTERCEPT_IP LOOP 0x340
+832 0 19 1 1000
+
+#PXY_INTERCEPT_IP MONITOR 0x200/0x202/0x205
+512 0 21 1 1000
+514 0 21 1 1000
+514 10 21 1 1000
+514 20 21 1 1000
+514 30 21 1 1000
+514 40 21 1 1000
+514 50 21 1 1000
+514 60 21 1 1000
+514 70 21 1 1000
+514 80 21 1 1000
+514 90 21 1 1000
+514 100 21 1 1000
+517 0 21 1 1000
+
+#PXY_INTERCEPT_DOMAIN MONITOR 0x201/0x203
+513 0 22 1 1000
+515 0 22 1 1000
+515 10 22 1 1000
+515 20 22 1 1000
+515 30 22 1 1000
+515 40 22 1 1000
+515 50 22 1 1000
+515 60 22 1 1000
+515 70 22 1 1000
+515 80 22 1 1000
+515 90 22 1 1000
+515 100 22 1 1000
+
+#APP_POLICY REJECT 0x21
+33 0 8 1 1000
+#APP_POLICY MONITOR 0x91
+145 0 18 1 1000
+#IPD_DYN_SUBSCIBE_IP
+#DK_CLI_IP_CB
+1045 0 18 1 1000
+#APP_POLICY DROP 0x410
+1040 0 8 1 1000
+##APP_POLICY LIMIT 0x420
+1056 0 246 1 1000
+1056 10 247 1 1000
+1056 20 248 1 1000
+1056 30 249 1 1000
+1056 40 250 1 1000
diff --git a/bin/conf/table_info/service_id_map_test.conf b/bin/conf/table_info/service_id_map_test.conf
index c46a0ef..b272b4f 100644
--- a/bin/conf/table_info/service_id_map_test.conf
+++ b/bin/conf/table_info/service_id_map_test.conf
@@ -11,6 +11,9 @@
#INLINE_IP_CB DROP GRE 0x1C
28 0 1 1 1000
+#MM_DYN_VOIP_DROP DROP 0x112
+274 0 9 1 1000
+
#IR_STATIC_IP_POOL LOOP 0x340
832 0 1 1 1000
#IR_DYN_SIFT_IP LOOP 0x341
diff --git a/bin/conf/table_info/table_info_one.conf b/bin/conf/table_info/table_info_one.conf
index 4973cd7..8045389 100644
--- a/bin/conf/table_info/table_info_one.conf
+++ b/bin/conf/table_info/table_info_one.conf
@@ -1,9 +1,9 @@
#table_one:tabid servid type
-LIMIT_IP:1 5 REGION_TYPE_IP
PXY_INTERCEPT_IP:2 6 REGION_TYPE_IP
INLINE_IP_CB:3 7 REGION_TYPE_IP
IR_INTERCEPT_IP:4 8 REGION_TYPE_IP
DK_CLI_IP_CB:5 9 REGION_TYPE_IP
IPD_DYN_SUBSCIBE_IP:6 10 REGION_TYPE_POOL
ANTI_DDOS_ATTACK_CB:7 11 REGION_TYPE_IP
+MM_DYN_VOIP_DROP:8 12 REGION_TYPE_IP
diff --git a/bin/conf/table_info/table_info_tree.conf b/bin/conf/table_info/table_info_tree.conf
index 1dab0db..d99c494 100644
--- a/bin/conf/table_info/table_info_tree.conf
+++ b/bin/conf/table_info/table_info_tree.conf
@@ -2,5 +2,5 @@
APP_POLICY:11 APP_DOMAIN:12 APP_DYN_SEV_IP_CB:13 1 REGION_TYPE_FIND
APP_POLICY:11 NULL APP_STATIC_SEV_IP:14 2 REGION_TYPE_IP
NULL PXY_INTERCEPT_DOMAIN:15 PXY_DYN_SEV_IP_CB:16 3 REGION_TYPE_FIND
-NULL LIMIT_DOMAIN:17 LIMIT_DYN_IP_CB:18 4 REGION_TYPE_FIND
+#NULL LIMIT_DOMAIN:17 LIMIT_DYN_IP_CB:18 4 REGION_TYPE_FIND
diff --git a/bin/pangu_valve b/bin/pangu_valve
index 4b468d0..650a4fa 100644
--- a/bin/pangu_valve
+++ b/bin/pangu_valve
Binary files differ
diff --git a/bin/pangu_valve_test b/bin/pangu_valve_test
index bf0091b..d12954d 100644
--- a/bin/pangu_valve_test
+++ b/bin/pangu_valve_test
Binary files differ