diff options
| -rw-r--r-- | kni_intercept.c | 2 | ||||
| -rw-r--r-- | run/kni_set_tmp | 36 | ||||
| -rw-r--r-- | run/kniconf/kni (2).conf | 93 |
3 files changed, 130 insertions, 1 deletions
diff --git a/kni_intercept.c b/kni_intercept.c index a8a9717..1762636 100644 --- a/kni_intercept.c +++ b/kni_intercept.c @@ -439,7 +439,7 @@ int tun_alloc_mq(char *dev, int queues, int *fds,char* tun_path) MESA_load_profile_string_def((char*)KNI_CONF_FILENAME,(char*)KNI_TUN_MODE,(char*)"tun_path",tun_path,KNI_CONF_MAXLEN,"/dev/net/tun"); MESA_load_profile_string_def((char*)KNI_CONF_FILENAME,(char*)KNI_TUN_MODE,(char*)"tun_name",g_kni_comminfo.tun_name,KNI_CONF_MAXLEN,"tun0"); - MESA_load_profile_int_def((char*)KNI_CONF_FILENAME,(char*)KNI_STATIC_MAAT_MODE,(char*)"tun_num",&(g_kni_comminfo.tun_num),1); + MESA_load_profile_int_def((char*)KNI_CONF_FILENAME,(char*)KNI_TUN_MODE,(char*)"tun_num",&(g_kni_comminfo.tun_num),1); if(g_kni_comminfo.tun_num<=0) diff --git a/run/kni_set_tmp b/run/kni_set_tmp new file mode 100644 index 0000000..891a199 --- /dev/null +++ b/run/kni_set_tmp @@ -0,0 +1,36 @@ +#!/bin/sh + +n=3 + +rtable_id_ingress0=100 +rtable_id_egress0=200 +fwmark0=0x65 + +echo 1 > /proc/sys/net/ipv4/ip_forward +echo 0 > /proc/sys/net/ipv4/tcp_window_scaling +echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter + +sysctl -w net.ipv4.conf.default.rp_filter=0 + +# Create TUN devices +for i in $(seq 0 $n) +do +tun_iface_num="tun${i}" +let "rtable_id_egress_num=${rtable_id_egress0}+${i}" +let "fwmark_num=${fwmark0}+${i}" + +ip tuntap add dev ${tun_iface_num} mode tun +ifconfig ${tun_iface_num} up + +# Ingress +ip rule add iif ${tun_iface_num} tab ${rtable_id_ingress0} + +# Egress +ip rule add fwmark ${fwmark_num} lookup ${rtable_id_egress_num} +ip route add default dev ${tun_iface_num} table ${rtable_id_egress0} +done + +ip route add local default dev lo table ${rtable_id_ingress0} + +# Flush cache +ip route flush cache diff --git a/run/kniconf/kni (2).conf b/run/kniconf/kni (2).conf new file mode 100644 index 0000000..912522d --- /dev/null +++ b/run/kniconf/kni (2).conf @@ -0,0 +1,93 @@ +[main] +htable_elem_num=10000000 +######0:intercept;1:bypass +default_work_mode=0 +######0:not replay;1:replay +replay_win_update=1 +######0:G 1:two network card +sendpkt_mode=0 +#####0:not join pkts in listq;1:join pkts in listq +write_listqueue_switch=0 +#####0:join fds in listq;1:not join fds in listq +send_fds_mode=0 +ratelimit_switch=1 +replace_switch=1 + +domain_path=/home/server_unixsocket_file +socketopt_mark=101 + +logger_level=30 +logger_filepath=./log/kni.log + +[tun] +tun_path=/dev/net/tun +tun_name=tun +tun_num=4 + +[field_stat] +filestat2_filename=./log/kni_fs2.log +filestat2_sip=0.0.0.0 +filestat2_sport=0 + + +[dynmic_maat] +#0:iris;1:json;2:redis +dyn_maat_readconf_mode=2 +dyn_redis_server=192.168.11.243 +dyn_redis_port=6800 +dyn_redis_db_index=1 +dyn_scandir_interval=1000 +dyn_effect_interval=60000 +dyn_stat_file_path=./log/kni_dyn_maat_stat +dyn_table_info_path=./kniconf/maat_table_info.conf + + +[static_maat] +#0:iris;1:json;2:redis +maat_readconf_mode=2 +redis_server=192.168.11.243 +redis_port=6379 +redis_db_index=4 +scandir_interval=1000 +effect_interval=1000 +stat_file_path=./log/kni_static_maat_stat +table_info_path=./kniconf/maat_table_info.conf +full_cfg_dir=/home/mesasoft/tango_rules/full/index +inc_cfg_dir=/home/mesasoft/tango_rules/inc/index + +[send_log] +send_log_switch=0 +NIC_NAME=eth0 +ENTRANCE_ID=0 +KAFKA_BROKERLIST=192.168.10.73:9092 + + + +[Module] +table_info_path=./kniconf/maat_table_info.conf +full_cfg_dir=/home/mesasoft/tango_rules/full/index +inc_cfg_dir=/home/mesasoft/tango_rules/inc/index +logger_filepath=./log/kni.log +logger_level=30 + +#0:intercept;1:bypass +default_work_mode=1 +#0:not replay;1:replay +replay_win_update=1 + +#0:iris;1:json;2:redis +maat_readconf_mode=2 +redis_server=10.3.34.1 +redis_port=6379 +redis_db_index=4 +scandir_interval=1000 +effect_interval=1000 + +//dyn_domain +dyn_maat_readconf_mode=1 +dyn_redis_server=192.168.11.243 +dyn_redis_port=6379 +dyn_redis_db_index=5 + +write_listqueue_switch=0 +send_fds_mode=1 |