diff --git a/ansible/install_config/group_vars/rpm_version.yml b/ansible/install_config/group_vars/rpm_version.yml index 0d0b4513..4452bbf6 100644 --- a/ansible/install_config/group_vars/rpm_version.yml +++ b/ansible/install_config/group_vars/rpm_version.yml @@ -25,7 +25,7 @@ firewall_rpm_version: gtp: gtp-1.0.5.afa055c gtp_signaling_plug: gtp_signaling_plug-1.0.2.2dfced5 deal_socks: deal_socks-1.0.2.379a897 - tsg_ddos_sketch: tsg_ddos_sketch-1.0.12.84a9b64 + tsg_ddos_sketch: tsg_ddos_sketch-1.0.13.89c5d36 framework_rpm_version: libcjson: libcjson-1.7.11.93ffba0 diff --git a/ansible/roles/firewall/templates/main.conf.j2.j2 b/ansible/roles/firewall/templates/main.conf.j2.j2 index c91ec2d6..99a5188d 100644 --- a/ansible/roles/firewall/templates/main.conf.j2.j2 +++ b/ansible/roles/firewall/templates/main.conf.j2.j2 @@ -121,9 +121,11 @@ throughput=1 mv_depth=4 mv_width=13660 timestemp=5 -min_report_threshold=20 -#tcp_flood, udp_flood, icmp_flood, dns_flood -report_thresh="["0.008", "0.008", "0.008", "0.008"]" +min_report_threshold=150 +tcp_flood_thresh="0.0008" +udp_flood_thresh="0.0008" +icmp_flood_thresh="0.0008" +dns_flood_thresh="0.0008" {% if PROFILE_ID == '9000-NPB-P01R01' %} [TRAFFIC_MIRROR]