[global] log_path = ./log/kni/kni.log log_level = 10 tfe_node_count = 1 manage_eth = eth0 #normal or tun deploy_mode = normal tun_name = tun_kni src_mac_addr = 00:0e:c6:d6:72:c1 dst_mac_addr = fe:65:b7:03:50:bd [tfe0] enabled = 1 dev_eth_symbol = eth7 ip_addr = 192.168.100.2 [tfe1] enabled = 1 dev_eth_symbol = eth8 ip_addr = 192.168.100.3 [tfe2] enabled = 1 dev_eth_symbol = eth9 ip_addr = 192.168.100.4 [tfe_cmsg_receiver] listen_eth = eth2.100 listen_port = 2475 [watch_dog] switch = 1 listen_eth = eth2.100 listen_port = 2476 keepalive_idle = 2 keepalive_intvl = 1 keepalive_cnt = 3 [maat] #readconf_mode: 0 = iris, 1 = json, 2 = redis readconf_mode = 2 tableinfo_path = ./etc/kni/maat_tableinfo.conf maatjson_path = ./etc/kni/maat_test.json redis_ip = 192.168.10.31 redis_port = 6379 redis_index = 0 tablename_intercept_ip = PXY_INTERCEPT_IP tablename_intercept_domain = PXY_INTERCEPT_DOMAIN #default_action: 0x80 = bypass, 0x02 = intercept default_action = 128 [send_logger] switch = 0 kafka_topic = SESSION-RECORD-LOG #kafka_brokerlist = 192.168.10.119:9092,192.168.10.122:9092,192.168.10.123:9092 kafka_brokerlist = 192.168.10.52:9092 [marsio] appsym = knifw [kafka] queue.buffering.max.messages = 1000000 topic.metadata.refresh.interval.ms = 600000 security.protocol = MG #128:bypass, 2: intercept [dup_traffic] switch = 0 action = 2 capacity = 1000000 error_rate = 0.05 expiry_time = 30 [traceid2pme_htable] mho_screen_print_ctrl = 0 mho_thread_safe = 1 mho_mutex_num = 160 mho_hash_slot_size = 160000 mho_hash_max_element_num = 640000 mho_expire_time = 30 mho_eliminate_type = LRU [tuple2stream_htable] mho_screen_print_ctrl = 0 mho_thread_safe = 0 mho_mutex_num = 160 mho_hash_slot_size = 160000 mho_hash_max_element_num = 640000 [field_stat] remote_switch = 1 remote_ip = 192.168.10.152 remote_port = 8125 local_path = ./fs2_kni.status