更新tsg-ddos-sketch到v1.0.13,版本修改：修改配置文件中阈值由数组读取变为字符串读取

2021-09-18 15:08:01 +08:00
parent 22e4b7c3f6
commit fd06266d82
2 changed files with 6 additions and 4 deletions
--- a/ansible/install_config/group_vars/rpm_version.yml
+++ b/ansible/install_config/group_vars/rpm_version.yml
@@ -25,7 +25,7 @@ firewall_rpm_version:
  gtp: gtp-1.0.5.afa055c
  gtp_signaling_plug: gtp_signaling_plug-1.0.2.2dfced5
  deal_socks: deal_socks-1.0.2.379a897
-  tsg_ddos_sketch: tsg_ddos_sketch-1.0.12.84a9b64
+  tsg_ddos_sketch: tsg_ddos_sketch-1.0.13.89c5d36

 framework_rpm_version:
  libcjson: libcjson-1.7.11.93ffba0
--- a/ansible/roles/firewall/templates/main.conf.j2.j2
+++ b/ansible/roles/firewall/templates/main.conf.j2.j2
@@ -121,9 +121,11 @@ throughput=1
 mv_depth=4
 mv_width=13660
 timestemp=5
-min_report_threshold=20
-#tcp_flood, udp_flood, icmp_flood, dns_flood
-report_thresh="["0.008", "0.008", "0.008", "0.008"]"
+min_report_threshold=150
+tcp_flood_thresh="0.0008"
+udp_flood_thresh="0.0008"
+icmp_flood_thresh="0.0008"
+dns_flood_thresh="0.0008"

 {% if PROFILE_ID == '9000-NPB-P01R01' %}
 [TRAFFIC_MIRROR]