summaryrefslogtreecommitdiff
path: root/roles/firewall
diff options
context:
space:
mode:
authorliuxueli <[email protected]>2020-10-19 20:50:35 +0800
committerliuxueli <[email protected]>2020-10-19 20:50:35 +0800
commit93fc4a94b8afdc78dd509faee0ecc7783a8a30fc (patch)
treeba9247b32701f05fe873f4e9a9d97060f84c5b04 /roles/firewall
parent18410aa84a8bec4f511cf053a8dae04986c56269 (diff)
Diffstat (limited to 'roles/firewall')
-rw-r--r--roles/firewall/files/capture_packet_plug-3.0.3.cc6f3cf-2.el7.x86_64.rpmbin15300 -> 0 bytes
-rw-r--r--roles/firewall/files/capture_packet_plug-3.0.4.42574b7-2.el7.x86_64.rpmbin0 -> 16876 bytes
-rw-r--r--roles/firewall/tasks/main.yml2
-rw-r--r--roles/firewall/templates/main.conf.j244
4 files changed, 24 insertions, 22 deletions
diff --git a/roles/firewall/files/capture_packet_plug-3.0.3.cc6f3cf-2.el7.x86_64.rpm b/roles/firewall/files/capture_packet_plug-3.0.3.cc6f3cf-2.el7.x86_64.rpm
deleted file mode 100644
index 464aaac..0000000
--- a/roles/firewall/files/capture_packet_plug-3.0.3.cc6f3cf-2.el7.x86_64.rpm
+++ /dev/null
Binary files differ
diff --git a/roles/firewall/files/capture_packet_plug-3.0.4.42574b7-2.el7.x86_64.rpm b/roles/firewall/files/capture_packet_plug-3.0.4.42574b7-2.el7.x86_64.rpm
new file mode 100644
index 0000000..96db0f0
--- /dev/null
+++ b/roles/firewall/files/capture_packet_plug-3.0.4.42574b7-2.el7.x86_64.rpm
Binary files differ
diff --git a/roles/firewall/tasks/main.yml b/roles/firewall/tasks/main.yml
index 36fdd9e..32dcd1b 100644
--- a/roles/firewall/tasks/main.yml
+++ b/roles/firewall/tasks/main.yml
@@ -11,7 +11,7 @@
skip_broken: yes
vars:
fw_packages:
- - /tmp/ansible_deploy/capture_packet_plug-3.0.3.cc6f3cf-2.el7.x86_64.rpm
+ - /tmp/ansible_deploy/capture_packet_plug-3.0.4.42574b7-2.el7.x86_64.rpm
- /tmp/ansible_deploy/conn_telemetry-1.0.2.8d6da43-2.el7.x86_64.rpm
- /tmp/ansible_deploy/dns-2.0.9.b639626-2.el7.x86_64.rpm
- /tmp/ansible_deploy/ftp-1.0.8.13d5fda-2.el7.x86_64.rpm
diff --git a/roles/firewall/templates/main.conf.j2 b/roles/firewall/templates/main.conf.j2
index e67e279..4520db6 100644
--- a/roles/firewall/templates/main.conf.j2
+++ b/roles/firewall/templates/main.conf.j2
@@ -1,55 +1,57 @@
[FTP_PLUG]
-LOG_PATH=./tsglog/fw_ftp_plug/fw_ftp_plug
+LOG_PATH="./tsglog/fw_ftp_plug/fw_ftp_plug"
LOG_LEVEL={{ fw_ftp_log_level }}
TIMEOUT=600
[MAIL_PLUG]
-LOG_PATH=./tsglog/fw_mail_plug/fw_mail_plug
+LOG_PATH="./tsglog/fw_mail_plug/fw_mail_plug"
LOG_LEVEL={{ fw_mail_log_level }}
TIMEOUT=600
[HTTP_PLUG]
-LOG_PATH=./tsglog/fw_http_plug/fw_http_plug
+LOG_PATH="./tsglog/fw_http_plug/fw_http_plug"
LOG_LEVEL={{ fw_http_log_level }}
[DNS_PLUG]
-LOG_PATH=./tsglog/fw_dns_plug/fw_dns_plug
+LOG_PATH="./tsglog/fw_dns_plug/fw_dns_plug"
LOG_LEVEL={{ fw_dns_log_level }}
[QUIC_PLUG]
-LOG_PATH=./tsglog/fw_quic_plug/fw_quic_plug
+LOG_PATH="./tsglog/fw_quic_plug/fw_quic_plug"
LOG_LEVEL={{ fw_quic_log_level }}
[MAAT]
-PROFILE=./tsgconf/maat.conf
-SUBSCRIBER_ID_TABLE=TSG_OBJ_SUBSCRIBER_ID
-CB_SUBSCRIBER_IP_TABLE=TSG_DYN_SUBSCRIBER_IP
-IP_ADDR_TABLE=TSG_SECURITY_ADDR
+PROFILE="./tsgconf/maat.conf"
+SUBSCRIBER_ID_TABLE="TSG_OBJ_SUBSCRIBER_ID"
+CB_SUBSCRIBER_IP_TABLE="TSG_DYN_SUBSCRIBER_IP"
+IP_ADDR_TABLE="TSG_SECURITY_ADDR"
[TSG_LOG]
MODE=1
-NIC_NAME={{ nic_mgr.name }}
+NIC_NAME="{{ nic_mgr.name }}"
MAX_SERVICE=1
LOG_LEVEL={{ tsg_log_level }}
-LOG_PATH=./tsglog/tsglog
-BROKER_LIST={{ log_kafkabrokers.address }}
-COMMON_FIELD_FILE=tsgconf/tsg_log_field.conf
+LOG_PATH="./tsglog/tsglog"
+BROKER_LIST="{{ log_kafkabrokers.address }}"
+COMMON_FIELD_FILE="tsgconf/tsg_log_field.conf"
[STATISTIC]
CYCLE=5
TELEGRAF_PORT=8100
-TELEGRAF_IP=127.0.0.1
-OUTPUT_PATH=./tsg_statistic.log
-APP_NAME=statistic
+TELEGRAF_IP="127.0.0.1"
+OUTPUT_PATH="./tsg_statistic.log"
+APP_NAME="statistic"
[FIELD_STAT]
CYCLE=5
TELEGRAF_PORT=8100
-TELEGRAF_IP=127.0.0.1
-OUTPUT_PATH=./tsg_stat.log
-APP_NAME=tsg_master
+TELEGRAF_IP="127.0.0.1"
+OUTPUT_PATH="./tsg_stat.log"
+APP_NAME="tsg_master"
[SYSTEM]
+ENTRANCE_ID={{ tsg_master_entrance_id }}
LOG_LEVEL={{ tsg_master_log_level }}
-LOG_PATH=./tsglog/tsg_master
-POLICY_PRIORITY_LABEL=POLICY_PRIORITY
+LOG_PATH="./tsglog/tsg_master"
+POLICY_PRIORITY_LABEL="POLICY_PRIORITY"
+DEVICE_ID_COMMAND="hostname | awk -F'-' '{print $3}'| awk -F'ADC' '{print $2}'" \ No newline at end of file