blob: 40b2907d6c1c2c6461c3a26087c650a5f61beae1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
server:
port: 9999
spring:
application:
name: FJ-Transform-Project
# TSG 账号
tsg:
system:
url: http://192.168.44.29:8083
username: galaxy
password: ozcQzjngV8A2C34NuW9KCQ==
token:
# http 超时时间
httpTimeOut: 3600000
ipObjectId: 157
ipObjectName: sg-test
urlObjectId: 158
urlObjectName: sg-test
fqdnObjectId: 159
fqdnObjectName: sg-test
# source object
ip:
objectId: 555894
objectName: test_galaxy
#指定排除的IP. 1.如果没有可不写值，2.若有多个用英文逗号,分隔如: 127.0.0.1,127.0.0.2，3.可适用IP段匹配，如：127.*
excludeValue: 0.0.0.0,255.255.255.255,127.*,8.8.8.8,1.1.1.1
update:
cron: 0 0 1 * * ?
enable: false
filePath: /Users/wangwei/IdeaProjects/fj-transform-api/file/ip-25w-2.txt
upperLimit: 10
maskBit: 24
delete:
#偏移秒数，正数向未来偏移，负数向历史偏移
offset: 0
entity:
ipObjectId: 8878
ipObjectName: 0217Psiphon_Client_IP
update:
cron: 0 0 1 * * ?
enable: false
#Plan B sql: SELECT common_client_ip as client_ip, count(DISTINCT common_server_ip) as num FROM security_event WHERE common_recv_time > now() - 10 * 60 AND common_recv_time <= now() AND notEmpty(common_client_ip) AND common_policy_id = '97810' GROUP BY client_ip HAVING num >= 10
sql: SELECT DISTINCT client_ip FROM psiphon_client_detection_event WHERE event_time >= now()-600 AND event_time < now() AND notEmpty(client_ip)
delete:
# DELETE、PUT
option: DELETE
cron: 0 0 1 * * ?
enable: false
#偏移秒数，正数向未来偏移，负数向历史偏移
offset: -600
batch:
objects:
- id: 923368120881
ipObjectId: 8971
ipObjectName: Subscriber_IP_1
- id: 923368120911
ipObjectId: 8972
ipObjectName: Subscriber_IP_2
- id: 923368120882
ipObjectId: 8973
ipObjectName: Subscriber_IP_3
- id: 923368120916
ipObjectId: 8974
ipObjectName: Subscriber_IP_4
- id: 923368120902
ipObjectId: 8975
ipObjectName: Subscriber_IP_5
update:
cron: 0 0 1 * * ?
enable: false
sql: SELECT cflow_post_nat_source_ipv4_addr AS ip, cflow_port_range_start AS start_port, cflow_port_range_end AS end_port FROM cflow_record cr WHERE common_recv_time > now() - 60 * 2 AND common_recv_time <= now() AND cflow_data_flowset_id = '265'AND cflow_ipv4_src_addr IN (SELECT DISTINCT radius_framed_ip FROM radius_record rr WHERE common_recv_time > now() - 60 * 2 AND common_recv_time <= now() AND radius_calling_station_id IN ('{}'))
delete:
cron: 0 0 1 * * ?
enable: false
offset: -600
## ClickhHouse configuration, timeout: milliseconds read and connection
clickhouse:
timeout: 600000
url: http://192.168.44.12:8123
dbname: tsg_galaxy_v3
username: tsg_query
password: galaxy2018
|
