调整kni.conf

conf/kni.conf

@@ -1,15 +1,45 @@
 [global]
 log_path = ./log/kni/kni.log
 log_level = 10
-tfe_node_count = 1
-local_eth = enp8s0
+tfe_node_count = 3
 tfe_data_recv_thread_num = 8
+manage_eth = eth0
 #keepalive_replay: window update replay
 keepalive_replay_switch = 1
 
+[tfe0]
+enabled = 1
+mac_addr = fe:65:b7:03:50:bd
+dev_eth_symbol = eth7
+ip_addr = 192.168.10.38
+
+[tfe1]
+enabled = 1
+mac_addr = fe:65:b7:03:50:bd
+dev_eth_symbol = eth8
+ip_addr = 192.168.10.39
+
+[tfe2]
+enabled = 1
+mac_addr = fe:65:b7:03:50:bd
+dev_eth_symbol = eth9
+ip_addr = 192.168.10.40
+
+[tfe_cmsg_receiver]
+listen_eth = eth0
+listen_port = 2475
+
+[watch_dog]
+listen_eth = eth0
+listen_port = 2476
+keepalive_switch = 1
+keepalive_idle = 2
+keepalive_intvl = 1
+keepalive_cnt = 3
+
 [maat]
 #readconf_mode: 0 = iris, 1 = json, 2 = redis
-readconf_mode = 2
+readconf_mode = 1
 tableinfo_path = ./conf/kni/maat_tableinfo.conf
 maatjson_path = ./conf/kni/maat_test.json
 redis_ip = 192.168.10.120
@@ -17,50 +47,24 @@ redis_port = 6390
 redis_index = 4
 tablename_intercept_ip = PXY_INTERCEPT_IP
 tablename_intercept_domain = PXY_INTERCEPT_DOMAIN
-compile_alias = COMPILE_ALIAS
 #default_action: 0x80 = bypass, 0x02 = intercept
 default_action = 128
 
+[send_logger]
+switch = 0
+kafka_topic = SESSION-RECORD-LOG
+kafka_brokerlist = 192.168.10.119:9092,192.168.10.122:9092,192.168.10.123:9092
+
 [marsio]
 appsym = knifw
 dev_vxlan_symbol = vxlan_user
 src_mac_addr = 00:0e:c6:d6:72:c1
 
-[tfe0]
-enabled = 1
-mac_addr = fe:65:b7:03:50:bd
-dev_eth_symbol = ens1f5
-ip_addr = 
-
-[tfe1]
-enabled = 1
-mac_addr = fe:65:b7:03:50:bd
-dev_eth_symbol = eth8
-ip_addr = 
-
-[tfe2]
-enabled = 1
-mac_addr = fe:65:b7:03:50:bd
-dev_eth_symbol = eth9
-ip_addr = 
-
-[field_stat]
-stat_path = ./fs2_kni.status
-
-[send_logger]
-switch = 1
-kafka_topic = SESSION-RECORD-LOG
-kafka_brokerlist = 192.168.10.119:9092,192.168.10.122:9092,192.168.10.123:9092
-
 [kafka]
 queue.buffering.max.messages = 1000000
 topic.metadata.refresh.interval.ms = 600000
 security.protocol = MG
 
-[tfe_cmsg_receiver]
-listen_eth = enp8s0
-listen_port = 2475
-
 [traceid2pme_htable]
 mho_screen_print_ctrl = 0
 mho_thread_safe = 1
@@ -80,10 +84,5 @@ mho_hash_max_element_num = 640000
 mho_expire_time = 0
 mho_eliminate_type = LRU
 
-[tfe_mgr]
-keepalive_switch = 1
-keepalive_idle = 2
-keepalive_intvl = 1
-keepalive_cnt = 3
-keepalive_listen_eth = 
-keepalive_listen_port = 2476
+[field_stat]
+stat_path = ./fs2_kni.status

conf/maat/maat_tableinfo.conf

@@ -1,5 +1,4 @@
 1	PXY_INTERCEPT_COMPILE	compile	escape	--
 2	PXY_INTERCEPT_GROUP	group	--
 3	PXY_INTERCEPT_IP	ip	--
-4	PXY_INTERCEPT_DOMAIN	expr	utf8	utf8	yes	0
-5	COMPILE_ALIAS	compile	escape	--
+4	PXY_INTERCEPT_DOMAIN	expr	utf8	utf8	yes	0

conf/maat/maat_test.json

@@ -5,8 +5,7 @@
         {
             "compile_id": 0,
             "service": 1,
-            "action": 1,
-            "table_name": "COMPILE_ALIAS",
+            "action": 2,
             "do_blacklist": 1,
             "do_log": 1,
             "effective_rage": 0,