Page MenuHomeVyOS Platform
Create Task
Maniphest T5368

FastNetmon service ids ddos-protection add support sflow mode
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

For now, service ids support only the mode mirror

set service ids ddos-protection mode mirror

It requires a lot of resources to monitor packets for this mode.

Add mode sflow that requires less resources.

set service ids ddos-protection mode sflow

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Improvement (missing useful functionality)

Event Timeline

Viacheslav created this task.Jul 19 2023, 3:50 PM
pasik added a subscriber: pasik.Jul 19 2023, 7:45 PM
Viacheslav changed the task status from Open to In progress.Jul 21 2023, 10:36 AM
Viacheslav claimed this task.
Viacheslav added a comment.Jul 21 2023, 11:02 AM

PR https://github.com/vyos/vyos-1x/pull/2105

set system sflow interface 'eth0'
set system sflow interface 'eth1'
set system sflow server 127.0.0.1

set service ids ddos-protection direction 'in'
set service ids ddos-protection mode 'sflow'
set service ids ddos-protection network '192.0.2.0/24'
set service ids ddos-protection sflow listen-address '127.0.0.1'
set service ids ddos-protection sflow port '6343'
set service ids ddos-protection threshold general pps '10000'
Viacheslav closed this task as Resolved.Jul 27 2023, 6:00 PM
Viacheslav moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.