gfwleak/solutions-tsg-scripts
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update new 20.08

Browse Source
This commit is contained in:
zhangzhihan
2020-09-10 03:22:39 +08:00
parent e088bc922b
commit 1d210d18c4
44 changed files with 448 additions and 431 deletions
Download Patch File Download Diff File Expand all files Collapse all files

88
install_config/group_vars/adc_global.yml Normal file
View File

@@ -0,0 +1,88 @@
#########################################
#####1: Inline_device; 2: Allot; 3: ADC_Tun_mode;
tsg_access_type: 2
#####2: ADC;
tsg_running_type: 2
########################################
#IP Config
maat_redis_server:
address: "192.168.40.168"
port: 7002
db: 0
dynamic_maat_redis_server:
address: "192.168.40.168"
port: 7002
db: 0
cert_store_server:
address: "192.168.100.1"
port: 9991
log_kafkabrokers:
address: "1.1.1.1:9092,2.2.2.2:9092"
log_minio:
address: "192.168.40.168;"
port: 9090
#########################################
#Log Level Config
#日志等级 10:DEBUG 20:INFO 30:FATAL
fw_ftp_log_level: 10
fw_mail_log_level: 10
fw_http_log_level: 10
fw_dns_log_level: 10
fw_quic_log_level: 10
capture_packet_log_level: 10
tsg_log_level: 10
tsg_master_log_level: 10
kni_log_level: 10
tfe_log_level: 10
tfe_http_log_level: 10
pangu_log_level: 10
doh_log_level: 10
certstore_log_level: 10
#######################################
#Sapp Performance Config
#Sapp工作在ADC计算板0时，建议使用如下30+8的配置，以保证更高的处理性能
sapp:
worker_threads: 30
send_only_threads_max: 8
bind_mask: 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37
inbound_route_dir: 1
########################################
#Kni Config
kni:
global:
tfe_node_count: 3
watch_dog:
switch: 1
maat:
readconf_mode: 2
send_logger:
switch: 1
tfe_nodes:
tfe0_enabled: 1
tfe1_enabled: 1
tfe2_enabled: 1
########################################
#Tfe Config
tfe:
nr_threads: 32
mc_cache_eth: lo
keykeeper:
no_cache: 0
########################################
#Marsio Config
#marsio工作在ADC计算板时，建议使用如下配置，以保证更高的处理性能
mrzcpd:
iocore: 44,45,46,47
mrtunnat:
lcore_id: 40,41,42,43

37
install_config/group_vars/adc_mcn0.yml Normal file
View File

@@ -0,0 +1,37 @@
#########################################
#Mcn0管理口网卡名
nic_mgr:
name: enp6s0
#########################################
#Mcn0流量接入网卡，固定配置
nic_data_incoming:
name: ens1f4
#########################################
#Mcn0其他数据口网卡名配置，固定配置
nic_inner_ctrl:
name: ens1.100
nic_to_tfe:
tfe0:
name: ens1f5
tfe1:
name: ens1f6
tfe2:
name: ens1f7
#########################################
#串联设备接入相关配置
inline_device_config:
ip: 192.168.1.30
mask: 255.255.255.252
#########################################
#Allot接入相关配置
AllotAccess:
virturlInterface_1: ens1f2.103
virturlInterface_2: ens1f2.104
virturlID_1: 103
virturlID_2: 104
vvipv4_mask: 24
vvipv6_mask: 64

17
install_config/group_vars/adc_mcn1.yml Normal file
View File

@@ -0,0 +1,17 @@
#########################################
#Mcn1管理口网卡名
nic_mgr:
name: enp6s0
#########################################
#Mcn1流量接入网卡，固定配置
nic_data_incoming:
name: ens1f1
#########################################
#Mcn1其他数据口网卡名配置，固定配置
nic_inner_ctrl:
name: ens1.100
nic_traffic_mirror:
name: ens1f2
use_mrzcpd: 1

17
install_config/group_vars/adc_mcn2.yml Normal file
View File

@@ -0,0 +1,17 @@
#########################################
#Mcn2管理口网卡名
nic_mgr:
name: enp6s0
#########################################
#Mcn2流量接入网卡，固定配置
nic_data_incoming:
name: ens8f1
#########################################
#Mcn2其他数据口网卡名配置，固定配置
nic_inner_ctrl:
name: ens8.100
nic_traffic_mirror:
name: ens8f2
use_mrzcpd: 1

17
install_config/group_vars/adc_mcn3.yml Normal file
View File

@@ -0,0 +1,17 @@
#########################################
#Mcn3管理口网卡名
nic_mgr:
name: enp6s0
#########################################
#Mcn3流量接入网卡，固定配置
nic_data_incoming:
name: ens8f1
#########################################
#Mcn3其他数据口网卡名配置，固定配置
nic_inner_ctrl:
name: ens8.100
nic_traffic_mirror:
name: ens8f2
use_mrzcpd: 1

101
install_config/group_vars/all.yml
View File

@@ -1,101 +0,0 @@
#########################################
#####0: Pcap; 1: Inline_device; 2: Allot; 3: ADC_Tun_mode; 4: ATCA;
tsg_access_type: 4
#####0: Tun_mode; 1: normal; 2: ADC;
tsg_running_type: 1
#Common combination mode:
#1:Server or PC tun mode: 0 + 0
#2:Server with Inline device: 1 + 1
#3:ADC with Inline device: 1 + 2
#4:ADC with Allot: 2 + 2
#5:ADC tun mode: 3 + 1
#6:ATCA: 4 + 1
########################################
maat_redis_server:
address: "192.168.40.168"
port: 7002
db: 0
dynamic_maat_redis_server:
address: "192.168.40.168"
port: 7002
db: 0
cert_store_server:
address: "192.168.100.1"
port: 9991
log_kafkabrokers:
address: "1.1.1.1:9092,2.2.2.2:9092"
log_minio:
address: "192.168.40.168;"
port: 9090
fs_remote:
switch: 1
address: "192.168.100.1"
port: 58125
########################################
sapp:
worker_threads: 16
send_only_threads_max: 8
bind_mask: 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
inbound_route_dir: 1
########################################
kni:
global:
log_level: 30
tfe_node_count: 3
watch_dog:
switch: 1
maat:
readconf_mode: 2
send_logger:
switch: 1
tfe_nodes:
tfe0_enabled: 1
tfe1_enabled: 1
tfe2_enabled: 1
########################################
tfe:
nr_threads: 32
mc_cache_eth: lo
keykeeper:
no_cache: 0
########################################
mrzcpd:
iocore: 39
mrtunnat:
lcore_id: 38
#############ATCA config################
nic_data_incoming:
ethname: enp1s0
vf0_name: enp1s2
vf1_name: enp1s2f1
vf2_name: enp1s2f2
VlanFlipping:
vlanID_1: 100
vlanID_2: 101
vlanID_3: 103
vlanID_4: 104
#############Server or PC tun mode######
server:
ethname: eth0
tun_name: eth0.100
internal_interface: "eth2"
external_interface: "eth3"

23
install_config/group_vars/blade-00.yml
View File

@@ -1,23 +0,0 @@
nic_mgr:
name: enp6s0
nic_data_incoming:
name: ens1f4
ip: 192.168.1.30
mask: 255.255.255.252
nic_inner_ctrl:
name: ens1.100
nic_to_tfe:
tfe0:
name: ens1f5
tfe1:
name: ens1f6
tfe2:
name: ens1f7
AllotAccess:
virturlInterface_1: ens1f2.103
virturlInterface_2: ens1f2.104
virturlID_1: 103
virturlID_2: 104
vvipv4_mask: 24
vvipv6_mask: 64

11
install_config/group_vars/blade-01.yml
View File

@@ -1,11 +0,0 @@
nic_mgr:
name: enp6s0
nic_data_incoming:
name: ens1f1
mac: AA:BB:CC:DD:EE:FF
address: 127.0.0.1
nic_inner_ctrl:
name: ens1.100
nic_traffic_mirror:
name: ens1f2
use_mrzcpd: 1

10
install_config/group_vars/blade-02.yml
View File

@@ -1,10 +0,0 @@
nic_mgr:
name: enp6s0
nic_data_incoming:
name: ens8f1
mac: AA:BB:CC:DD:EE:FF
nic_inner_ctrl:
name: ens8.100
nic_traffic_mirror:
name: ens8f2
use_mrzcpd: 1

10
install_config/group_vars/blade-03.yml
View File

@@ -1,10 +0,0 @@
nic_mgr:
name: enp6s0
nic_data_incoming:
name: ens8f1
mac: AA:BB:CC:DD:EE:FF
nic_inner_ctrl:
name: ens8.100
nic_traffic_mirror:
name: ens8f2
use_mrzcpd: 1

123
install_config/group_vars/server_as_tun_mode.yml Normal file
View File

@@ -0,0 +1,123 @@
#########################################
#####0: Pcap; 1: Inline_device; 4: ATCA;
tsg_access_type: 0
#####0: Tun_mode; 1: normal;
tsg_running_type: 0
########################################
#Server Basic Config
nic_mgr:
name: eth0
nic_inner_ctrl:
name: eth0.100
#########################################
#IP Config
maat_redis_server:
address: "192.168.40.168"
port: 7002
db: 0
dynamic_maat_redis_server:
address: "192.168.40.168"
port: 7002
db: 0
cert_store_server:
address: "192.168.100.1"
port: 9991
log_kafkabrokers:
address: "1.1.1.1:9092,2.2.2.2:9092"
log_minio:
address: "192.168.40.168;"
port: 9090
#########################################
#Log Level Config
#日志等级 10:DEBUG 20:INFO 30:FATAL
fw_ftp_log_level: 10
fw_mail_log_level: 10
fw_http_log_level: 10
fw_dns_log_level: 10
fw_quic_log_level: 10
capture_packet_log_level: 10
tsg_log_level: 10
tsg_master_log_level: 10
kni_log_level: 10
tfe_log_level: 10
tfe_http_log_level: 10
pangu_log_level: 10
doh_log_level: 10
certstore_log_level: 10
#########################################
#Sapp Performance Config
#如果tsg_access_type=0，sapp跑在pcap模式，则以下配置可忽略
sapp:
worker_threads: 16
send_only_threads_max: 8
bind_mask: 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
inbound_route_dir: 1
#########################################
#Sapp Double-Arm Config
packet_io:
internal_interface: eth2
external_interface: eth3
#########################################
#Kni Config
kni:
global:
tfe_node_count: 1
watch_dog:
switch: 1
maat:
readconf_mode: 2
send_logger:
switch: 1
tfe_nodes:
tfe0_enabled: 1
tfe1_enabled: 0
tfe2_enabled: 0
#########################################
#Tfe Config
tfe:
nr_threads: 32
mc_cache_eth: lo
keykeeper:
no_cache: 0
#########################################
#Marsio Config
mrzcpd:
iocore: 39
mrtunnat:
lcore_id: 38
#########################################
#ATCA Config
#下列配置只在tsg_access_type=4时生效
nic_data_incoming:
ethname: enp1s0
vf0_name: enp1s2
vf1_name: enp1s2f1
vf2_name: enp1s2f2
VlanFlipping:
vlanID_1: 100
vlanID_2: 101
vlanID_3: 103
vlanID_4: 104
#########################################
#Inline Device Config
inline_device_config:
ip: 192.168.1.30
mask: 255.255.255.252

23
install_config/hosts
View File

@@ -2,25 +2,16 @@
ansible_user=root
package_source=local
[pc-as-tun-mode]
[server-as-tun-mode]
[blade-mxn]
1.1.1.1 device_id=1
[adc_mxn]
[blade-00]
1.1.1.1 device_id=1 vvipv4_1= vvipv4_2= vvipv6_1= vvipv6_2=
[adc_mcn0]
[blade-01]
1.1.1.1 device_id=1
[adc_mcn1]
[blade-02]
1.1.1.1 device_id=1
[adc_mcn2]
[adc_mcn3]
[blade-03]
1.1.1.1 device_id=1
[Functional_Host:children]
blade-00
blade-01
blade-02
blade-03