gfwleak/solutions-tsg-scripts
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

1. modify centry url

Browse Source 
2. modify  sapp template  to delete log file 2 days
3. add tcpdump_mesa
4. modify  app_l7_protocol.conf
5. modify maat.conf dynamic_maat_redis_server db value
This commit is contained in:
fumingwei
2020-11-23 16:13:50 +06:00
parent 4bb4862173
commit b81f808d78
21 changed files with 57 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
Aktau_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Aktau
tsg_master_entrance_id: 1

1
Aktubinsk_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Aktubinsk
tsg_master_entrance_id: 2

1
Almaty_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Almaty
tsg_master_entrance_id: 3

1
Atyrau_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Atyrau
tsg_master_entrance_id: 5

1
Karaganda_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Karaganda
tsg_master_entrance_id: 6

1
Kokshetau_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Kokshetau
tsg_master_entrance_id: 7

1
Kyzylorda_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Kyzylorda
tsg_master_entrance_id: 9

1
NurSultan_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Nur-sultan
tsg_master_entrance_id: 4

1
Taldykurgan_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Taldykurgan
tsg_master_entrance_id: 14

1
Uralsk_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Uralsk
tsg_master_entrance_id: 16

1
UstKamenogorsk_install_config/group_vars/adc_global.yml
View File

@@ -116,7 +116,6 @@ app_sketch_local_log_level: 10
app_control_plug_log_level: 10
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3556bac347c74585a994eb6823faf5c6
data_center: Ust-Kamenogorsk
tsg_master_entrance_id: 17

1
cmd2.txt Normal file
View File

@@ -0,0 +1 @@
ansible-playbook -i NurSultan_install_config/hosts adc_deploy.yml.with_tags -e "config_path=NurSultan_install_config" -l "10.4.51.*,10.4.55.*" -t "adc_exporter_proxy,redis,maat-redis" -f 78

2
group_vars/adc_global_general.yml
View File

@@ -94,3 +94,5 @@ mrtunnat:
#########################################
#Tsg_app
breakpad_upload_url: http://10.4.63.4:9000/api/2/minidump/?sentry_key=3203b43fd5384a7dbe6a48ecb1f3c595

4
roles/firewall/templates/app_l7_proto_id.conf.j2
View File

@@ -1,7 +1,7 @@
#TYPE：1:UCHAR,2:USHORT,3:USTRING,4:ULOG,5:USTRING,6:FILE,7:UBASE64,8:PACKET
#TYPE FIELD VALUE
STRING UNKNOWN_TCP UNCATEGORIZED
STRING UNKNOWN_UDP UNCATEGORIZED
STRING UNCATEGORIZED 100
STRING UNCATEGORIZED 101
STRING UNKNOWN_OTHER 102
STRING DNS 103
STRING FTP 104

6
roles/firewall/templates/maat.conf.j2
View File

@@ -24,9 +24,9 @@ TABLE_INFO=tsgconf/tsg_dynamic_tableinfo.conf
STAT_FILE=tsg_dynamic_maat.status
EFFECT_INTERVAL_S=1
REDIS_IP={{ dynamic_maat_redis_server.address }}
REDIS_PORT_NUM={{ maat_redis_server.port_num }}
REDIS_PORT={{ maat_redis_server.port }}
REDIS_INDEX={{ maat_redis_server.db }}
REDIS_PORT_NUM={{ dynamic_maat_redis_server.port_num }}
REDIS_PORT={{ dynamic_maat_redis_server.port }}
REDIS_INDEX={{ dynamic_maat_redis_server.db }}
JSON_CFG_FILE=tsgconf/tsg_maat.json
INC_CFG_DIR=tsgrule/inc/index/
FULL_CFG_DIR=tsgrule/full/index/

BIN
roles/sapp/files/tcpdump_mesa-1.0.2.0c5a950-2.el7.x86_64.rpm Normal file
View File

Binary file not shown.

14
roles/sapp/tasks/main.yml
View File

@@ -15,8 +15,16 @@
name:
- /tmp/ansible_deploy/sapp-4.2.7.5f789f6-2.el7.x86_64.rpm
state: present
- name: "install tcpdump_mesa rpms from localhost"
yum:
name:
- /tmp/ansible_deploy/tcpdump_mesa-1.0.2.0c5a950-2.el7.x86_64.rpm
state: present
skip_broken: yes
skip_broken: yes
- name: "mkdir tsgconf"
file:
path: /home/mesasoft/sapp_run/tsgconf
@@ -46,6 +54,12 @@
dest: /home/mesasoft/sapp_run/etc/sapp_log.conf
tags: template
- name: Template the sapp_tmpfile.conf
template:
src: "{{ role_path }}/files/sapp_tmpfile.conf.j2"
dest: /etc/tmpfiles.d/sapp_tmpfile.conf
tags: template
- name: Template the gdev.conf
template:
src: "{{ role_path }}/templates/gdev.conf.j2"

10
roles/sapp/templates/sapp.toml.j2
View File

@@ -182,7 +182,7 @@ dictator_enable=0
[TOOLS]
[tools.pkt_dump]
enabled=0
enabled=1
### note, mode options value:[storage, udp_socket]
mode=udp_socket
BSD_packet_filter=""
@@ -196,7 +196,7 @@ dictator_enable=0
dump_thread_id=[0,1,2,3,4]
[tools.pkt_dump.udp]
command_port=12345
command_port=9345
[tools.pkt_dump.storage]
### note, file path must be double quotation mark extension, for example, path="/dev/shm/pkt_dump"
@@ -215,8 +215,8 @@ dictator_enable=0
vxlan_sport_service_map_path="./etc/vxlan_sport_service_map.conf"
[breakpad]
disable_coredump=0
enable_breakpad=0
disable_coredump=1
enable_breakpad=1
breakpad_minidump_dir="/tmp/crashreport"
enable_breakpad_upload=0
enable_breakpad_upload=1
breakpad_upload_url="{{ breakpad_upload_url }}"

1
roles/sapp/templates/sapp_tmpfile.conf.j2 Normal file
View File

@@ -0,0 +1 @@
d /home/mesasoft/sapp_run/log 0755 - - 2d -

13
tasks/verify_process_md5_hash.yml Normal file
View File

@@ -0,0 +1,13 @@
- hosts: adc_mcn0
remote_user: root
tasks:
- name: "verify sapp md5 in mcn0"
shell: md5sum /home/mesasoft/sapp_run/sapp
register: sapp_md5sum
- name: assert
assert:
that:
- sapp_md5sum.stdout.find('1ca2eb92e4269066c6a056e41bb394b3') != -1
fail_msg: "FAIL"
success_msg: "PASS"

16
tasks/verify_tfe_md5_hash.yml Normal file
View File

@@ -0,0 +1,16 @@
- hosts:
- adc_mcn1
- adc_mcn2
- adc_mcn3
remote_user: root
tasks:
- name: "verify tfe md5 in mcn0"
shell: md5sum /opt/tsg/tfe/bin/tfe
register: tfe_md5sum
- name: assert
assert:
that:
- tfe_md5sum.stdout.find('0f45d2844dbff2edbde44bab0359cead') != -1
fail_msg: "FAIL"
success_msg: "PASS"