206985a65e
2、新增探针侧进行IP联动封禁的功能
92 lines
2.7 KiB
Properties
92 lines
2.7 KiB
Properties
#Server Configuration
|
||
server.port=8189
|
||
server.servlet.context-path=/syslogserve
|
||
#server.address=0.0.0.0
|
||
server.tomcat.uri-encoding=UTF-8
|
||
server.error.include-message=always
|
||
server.error.include-binding-errors=always
|
||
|
||
# Syslog Server Configuration
|
||
syslog.tcp.port=514
|
||
syslog.udp.port=514
|
||
syslog.max.frame.length=262144
|
||
syslog.buffer.size=1000
|
||
syslog.sm4.generateKey=f79548ab6fa8a304fc0115e17230358a
|
||
|
||
# APP Service Configuration
|
||
app.service.device_id=1
|
||
app.service.device_name=honeypot
|
||
app.service.vendor=changting
|
||
app.service.product_name=diting
|
||
#采集探针ID
|
||
app.service.device_collect_id=${DEVICE_COLLECT_ID:1}
|
||
# syslog message data_type
|
||
app.service.data_type=json
|
||
|
||
# kafka Configuration
|
||
spring.kafka.producer.bootstrap-servers=192.168.222.130:9092
|
||
spring.kafka.producer.topic =test-topic
|
||
|
||
|
||
#database Configuration
|
||
spring.datasource.url=jdbc:postgresql://117.72.68.72:54329/ecosys
|
||
spring.datasource.username=postgres
|
||
spring.datasource.password=TnLanWaidYSwTSG5
|
||
spring.datasource.driver-class-name=org.postgresql.Driver
|
||
|
||
# mybatis Configuration
|
||
mybatis.mapper-locations=classpath:mapper/*.xml
|
||
mybatis.type-aliases-package=com.common.entity
|
||
mybatis.configuration.map-underscore-to-camel-case=true
|
||
|
||
# 开发环境缓存配置
|
||
spring.redis.host=localhost
|
||
spring.redis.port=6379
|
||
# 密码(如果没有设置密码,可以省略)
|
||
spring.redis.password=
|
||
spring.redis.database=0
|
||
spring.redis.timeout=2000
|
||
|
||
spring.redis.lettuce.pool.max-active=8
|
||
spring.redis.lettuce.pool.max-wait=-1
|
||
spring.redis.lettuce.pool.max-idle=8
|
||
spring.redis.lettuce.pool.min-idle=0
|
||
# 开发环境缓存时间较短,方便调试
|
||
spring.cache.redis.time-to-live=600000
|
||
|
||
|
||
#防火墙封堵配置
|
||
# 是否启用真实封堵(false时仅打印日志,用于测试)
|
||
firewall.enabled=true
|
||
# iptables命令路径(通常为 /usr/sbin/iptables)
|
||
firewall.iptables-path=/usr/sbin/iptables
|
||
# 封堵链(常用 INPUT 或 FORWARD)
|
||
firewall.chain=INPUT
|
||
# 封堵策略(DROP 或 REJECT)
|
||
firewall.target=DROP
|
||
# 可选:API访问密钥(若为空则不校验)
|
||
firewall.api-key=your-secure-api-key
|
||
|
||
|
||
# 黑名单API配置
|
||
blacklist.api.url= https://103.43.84.11/api/v3/Objects/Blacklist
|
||
blacklist.api.username=apt-admin103
|
||
blacklist.api.password=C9W2xYgfc%SN1
|
||
|
||
# 白名单API配置
|
||
whitelist.api.url=https://103.43.84.11/api/v3/Policies/GlobalWhitelist
|
||
whitelist.api.username=apt-admin103
|
||
whitelist.api.password=C9W2xYgfc%SN1
|
||
|
||
# ============================================
|
||
# 探针联动配置
|
||
# ============================================
|
||
# 是否启用联动功能
|
||
interlocking.enabled=true
|
||
# syslog-consumer API基础URL(安全平台外网映射地址)
|
||
interlocking.api.base-url=http://localhost:8089/xdrservice/interlocking
|
||
# API-KEY认证(32位,需与syslog-consumer配置一致)
|
||
interlocking.api-key=a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6
|
||
# 定时任务执行间隔(毫秒),默认30秒
|
||
interlocking.schedule.interval=30000
|