2023-02-06 10:34:23 +08:00
|
|
|
|
[system]
|
|
|
|
|
|
nr_worker_threads=8
|
2023-03-02 16:13:02 +08:00
|
|
|
|
cpu_affinity_mask=2,3,4-9
|
2023-02-10 14:22:40 +08:00
|
|
|
|
firewall_sids=1001
|
2023-03-09 21:00:59 +08:00
|
|
|
|
enable_debug=0
|
2023-03-14 16:10:44 +08:00
|
|
|
|
enable_send_log=0
|
2023-03-27 14:37:18 +08:00
|
|
|
|
ts_update_interval_ms=1
|
2023-02-06 10:34:23 +08:00
|
|
|
|
|
2023-03-07 10:50:15 +08:00
|
|
|
|
# Only when (disable_coredump == 1 || (enable_breakpad == 1 && enable_breakpad_upload == 1)) is satisfied, the core will not be generated locally
|
|
|
|
|
|
disable_coredump=0
|
|
|
|
|
|
enable_breakpad=1
|
|
|
|
|
|
enable_breakpad_upload=1
|
|
|
|
|
|
breakpad_upload_url=http://sentry.mesalab.cn:9000/api/3/minidump/?sentry_key=e8e446bb3bd8435c97f4c01770ca7025
|
|
|
|
|
|
# must be /run/sce/crashreport,due to tmpfile limit
|
|
|
|
|
|
breakpad_minidump_dir=/run/sce/crashreport
|
|
|
|
|
|
breakpad_upload_tools=/opt/tsg/framework/bin/minidump_upload
|
|
|
|
|
|
|
2023-02-06 10:34:23 +08:00
|
|
|
|
[maat]
|
|
|
|
|
|
# 0:json 1:redis 2:iris
|
|
|
|
|
|
input_mode=1
|
2023-04-07 14:09:20 +08:00
|
|
|
|
# LOG_LEVEL_TRACE = 0; LOG_LEVEL_DEBUG = 1; LOG_LEVEL_INFO = 2;
|
|
|
|
|
|
# LOG_LEVEL_WARN = 3; LOG_LEVEL_ERROR = 4; LOG_LEVEL_FATAL = 5;
|
|
|
|
|
|
log_level=5
|
2023-02-06 10:34:23 +08:00
|
|
|
|
stat_switch=1
|
|
|
|
|
|
perf_switch=1
|
|
|
|
|
|
scan_detail=0
|
|
|
|
|
|
deferred_load=0
|
|
|
|
|
|
effect_interval_ms=1000
|
2023-02-21 09:58:31 +08:00
|
|
|
|
stat_file=log/maat.fs2
|
2023-02-06 10:34:23 +08:00
|
|
|
|
table_info=resource/table_info.conf
|
|
|
|
|
|
accept_path=/opt/tsg/etc/tsg_device_tag.json
|
|
|
|
|
|
inc_cfg_dir=resource/inc/
|
|
|
|
|
|
ful_cfg_dir=resource/ful/
|
|
|
|
|
|
json_cfg_file=resource/sce.json
|
|
|
|
|
|
foreign_cont_dir=resource/foreign_files
|
|
|
|
|
|
redis_db_idx=0
|
|
|
|
|
|
redis_server=127.0.0.1
|
2023-02-28 19:03:35 +08:00
|
|
|
|
redis_port_range=6379
|
2023-03-02 11:33:49 +08:00
|
|
|
|
max_chaining_size=32
|
2023-02-10 14:22:40 +08:00
|
|
|
|
|
|
|
|
|
|
[packet_io]
|
2023-05-04 17:56:12 +08:00
|
|
|
|
# bypass_traffic:0 disable
|
|
|
|
|
|
# bypass_traffic:1 bypass all traffic
|
|
|
|
|
|
# bypass_traffic:2 bypass raw traffic
|
|
|
|
|
|
# bypass_traffic:3 bypass decrypted traffic
|
|
|
|
|
|
bypass_traffic=0
|
2023-02-10 14:22:40 +08:00
|
|
|
|
rx_burst_max=128
|
2023-10-16 17:04:21 +08:00
|
|
|
|
min_timeout_ms=900
|
2023-02-10 14:22:40 +08:00
|
|
|
|
app_symbol=sce
|
2023-02-24 15:32:37 +08:00
|
|
|
|
|
2023-10-18 10:08:10 +08:00
|
|
|
|
dev_nf_name=nf_0_sce
|
|
|
|
|
|
|
|
|
|
|
|
# dev_endpoint_l2 for vlan
|
|
|
|
|
|
dev_endpoint_l2_name=endpoint_0_sce_l2
|
|
|
|
|
|
vlan_encapsulate_replace_orig_vlan_header=0
|
|
|
|
|
|
|
|
|
|
|
|
# dev_endpoint_l3 for vxlan
|
|
|
|
|
|
dev_endpoint_l3_name=endpoint_0_sce_l3
|
|
|
|
|
|
dev_endpoint_l3_ip=192.168.100.1
|
|
|
|
|
|
# dev_endpoint_l3_mac=aa:aa:aa:aa:aa:aa
|
2023-02-24 15:32:37 +08:00
|
|
|
|
|
2023-02-21 09:58:31 +08:00
|
|
|
|
[stat]
|
|
|
|
|
|
output_file=log/sce.fs2
|
|
|
|
|
|
statsd_server=127.0.0.1
|
|
|
|
|
|
statsd_port=8100
|
|
|
|
|
|
# 1 : FS_OUTPUT_STATSD
|
|
|
|
|
|
# 2 : FS_OUTPUT_INFLUX_LINE
|
|
|
|
|
|
statsd_format=1
|
|
|
|
|
|
statsd_cycle=2
|
|
|
|
|
|
prometheus_listen_port=9001
|
2023-02-21 21:24:15 +08:00
|
|
|
|
prometheus_listen_url=/sce_prometheus
|
|
|
|
|
|
|
2023-02-28 19:03:35 +08:00
|
|
|
|
[metrics]
|
2023-04-10 14:52:12 +08:00
|
|
|
|
# Kafka Topic: POLICY-RULE-METRICS
|
2023-02-28 19:03:35 +08:00
|
|
|
|
enable=1
|
|
|
|
|
|
interval_s=1
|
|
|
|
|
|
telegraf_bind_address=127.0.0.1
|
|
|
|
|
|
telegraf_listen_port=8300
|
|
|
|
|
|
|
2023-02-21 21:24:15 +08:00
|
|
|
|
[bfdd]
|
2023-03-30 17:44:33 +08:00
|
|
|
|
enable=1
|
2023-10-20 18:38:40 +08:00
|
|
|
|
# use default_gw_mac when enable = 0
|
|
|
|
|
|
default_gw_mac=aa:aa:aa:aa:aa:aa
|
2023-03-02 17:08:38 +08:00
|
|
|
|
path=/run/run/frr/bfdd.vty
|
2023-02-21 21:24:15 +08:00
|
|
|
|
device=eth0
|
|
|
|
|
|
local_address=127.0.0.1
|
2023-07-13 15:24:50 +08:00
|
|
|
|
gateway=127.0.0.1
|
|
|
|
|
|
icmp_cycle_time_s=10
|