2021-08-09 15:47:42 +08:00
|
|
|
|
##########################################
|
|
|
|
|
|
############## 数据库配置 ###############
|
|
|
|
|
|
##########################################
|
2021-08-03 16:57:18 +08:00
|
|
|
|
#Druid配置
|
2021-09-01 15:06:31 +08:00
|
|
|
|
druid.url=jdbc:avatica:remote:url=http://192.168.44.12:8082/druid/v2/sql/avatica/
|
2021-08-03 16:57:18 +08:00
|
|
|
|
druid.driver=org.apache.calcite.avatica.remote.Driver
|
2021-08-09 16:54:30 +08:00
|
|
|
|
druid.table=traffic_top_destination_ip_metrics_log
|
2021-08-03 16:57:18 +08:00
|
|
|
|
|
|
|
|
|
|
#HBase配置
|
2021-09-01 15:06:31 +08:00
|
|
|
|
hbase.table=dos:ddos_traffic_baselines
|
2021-08-17 19:17:33 +08:00
|
|
|
|
hbase.zookeeper.quorum=192.168.44.12
|
2021-08-03 16:57:18 +08:00
|
|
|
|
hbase.zookeeper.client.port=2181
|
|
|
|
|
|
|
2021-08-09 15:47:42 +08:00
|
|
|
|
##########################################
|
|
|
|
|
|
############## Druid数据读取 ###############
|
|
|
|
|
|
##########################################
|
|
|
|
|
|
#读取druid时间范围方式,
|
|
|
|
|
|
# 0:读取默认范围天数read.historical.days;
|
|
|
|
|
|
# 1:指定时间范围
|
2021-09-27 09:43:55 +08:00
|
|
|
|
read.druid.time.limit.type=0
|
2021-09-13 10:45:45 +08:00
|
|
|
|
read.druid.min.time=1627747200000
|
2021-09-10 14:51:20 +08:00
|
|
|
|
read.druid.max.time=1630425600000
|
2021-08-03 16:57:18 +08:00
|
|
|
|
|
2021-08-10 10:41:32 +08:00
|
|
|
|
#Druid字段映射
|
2021-08-09 16:54:30 +08:00
|
|
|
|
druid.attacktype.tcpsynflood=TCP SYN Flood
|
|
|
|
|
|
druid.attacktype.udpflood=UDP Flood
|
|
|
|
|
|
druid.attacktype.icmpflood=ICMP Flood
|
2021-09-27 09:43:55 +08:00
|
|
|
|
druid.attacktype.dnsamplification=DNS Flood
|
2021-08-09 16:54:30 +08:00
|
|
|
|
druid.columnname.serverip=destination_ip
|
|
|
|
|
|
druid.columnname.attacktype=attack_type
|
2021-08-09 15:47:42 +08:00
|
|
|
|
druid.columnname.recvtime=__time
|
2021-08-09 16:54:30 +08:00
|
|
|
|
druid.columnname.partition.num=partition_num
|
|
|
|
|
|
baseline.metric.type=session_rate
|
2021-09-01 19:16:28 +08:00
|
|
|
|
#baseline存储级别,1-type1;2-type1及type2;3-all
|
2021-09-09 10:57:42 +08:00
|
|
|
|
baseline.save.level=3
|
2021-08-09 15:47:42 +08:00
|
|
|
|
|
2021-08-10 10:41:32 +08:00
|
|
|
|
#Hbase字段映射
|
|
|
|
|
|
hbase.baseline.generation.type.suffix=baseline_type
|
2021-08-17 15:54:33 +08:00
|
|
|
|
hbase.baseline.zero.replace.value.suffix=default_value
|
2021-08-10 10:41:32 +08:00
|
|
|
|
|
2021-08-09 15:47:42 +08:00
|
|
|
|
#数据情况
|
|
|
|
|
|
#读取历史N天数据,最小值为3天(需要判断周期性)
|
2021-08-03 21:44:05 +08:00
|
|
|
|
read.historical.days=3
|
2021-08-03 16:57:18 +08:00
|
|
|
|
#历史数据汇聚粒度为10分钟
|
|
|
|
|
|
historical.grad=10
|
|
|
|
|
|
# 数据库Time格式
|
|
|
|
|
|
time.format=yyyy-MM-dd HH:mm:ss
|
|
|
|
|
|
|
2021-08-09 15:47:42 +08:00
|
|
|
|
##########################################
|
|
|
|
|
|
############ Baseline生成参数 #############
|
|
|
|
|
|
##########################################
|
|
|
|
|
|
baseline.range.days=1
|
|
|
|
|
|
baseline.function=KalmanFilter
|
2021-10-27 19:36:11 +08:00
|
|
|
|
baseline.period.correlative.threshold=0.8
|
|
|
|
|
|
baseline.historical.frequency.thread=0.5
|
2021-08-06 17:51:36 +08:00
|
|
|
|
baseline.exception.percentile=0.99
|
|
|
|
|
|
baseline.exception.fill.percentile=0.99
|
2021-10-27 19:35:07 +08:00
|
|
|
|
baseline.rational.percentile=0.99
|
|
|
|
|
|
|
2021-10-29 11:19:13 +08:00
|
|
|
|
baseline.type2.percentile=1
|
|
|
|
|
|
baseline.type3.percentile=1
|
|
|
|
|
|
|
2021-10-27 19:35:07 +08:00
|
|
|
|
# p99/p50 倍数阈值
|
|
|
|
|
|
baseline.times.percent.times=10
|
2021-08-09 15:47:42 +08:00
|
|
|
|
|
2021-08-03 16:57:18 +08:00
|
|
|
|
#Kalman Filter
|
2021-08-06 17:51:36 +08:00
|
|
|
|
baseline.kalman.q=0.1
|
2021-08-05 21:08:15 +08:00
|
|
|
|
baseline.kalman.r=0.1
|
2021-08-06 17:51:36 +08:00
|
|
|
|
baseline.kalman.p=8
|
|
|
|
|
|
baseline.kalman.m=2
|
2021-08-03 16:57:18 +08:00
|
|
|
|
|
2021-08-17 19:17:33 +08:00
|
|
|
|
monitor.frequency.bin.num=100
|
|
|
|
|
|
|
2021-08-09 15:47:42 +08:00
|
|
|
|
##########################################
|
|
|
|
|
|
################ 并发参数 #################
|
|
|
|
|
|
##########################################
|
2021-09-13 10:56:25 +08:00
|
|
|
|
all.partition.num=100
|
2021-09-27 09:43:55 +08:00
|
|
|
|
core.pool.size=10
|
|
|
|
|
|
max.pool.size=10
|
2021-08-09 16:54:30 +08:00
|
|
|
|
#druid分区字段partition_num的最大值为9999
|
2021-09-09 17:25:03 +08:00
|
|
|
|
druid.statement.query.timeout=36000
|
2021-08-09 16:54:30 +08:00
|
|
|
|
druid.partition.num.max=10000
|
2021-09-09 10:57:42 +08:00
|
|
|
|
druid.connection.retry.time.max=10000
|
|
|
|
|
|
#druid重连等待时间约为一个线程处理完成时间
|
2021-08-09 16:54:30 +08:00
|
|
|
|
druid.connection.retry.sleep.time=1000
|
2021-08-03 16:57:18 +08:00
|
|
|
|
|
|
|
|
|
|
|