Page MenuHomeVyOS Platform

FastNetmon service ids ddos-protection add support sflow mode
Closed, ResolvedPublicFEATURE REQUEST

Description

For now, service ids support only the mode mirror

set service ids ddos-protection mode mirror

It requires a lot of resources to monitor packets for this mode.

Add mode sflow that requires less resources.

set service ids ddos-protection mode sflow

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)

Event Timeline

Viacheslav changed the task status from Open to In progress.Jul 21 2023, 10:36 AM
Viacheslav claimed this task.

PR https://github.com/vyos/vyos-1x/pull/2105

set system sflow interface 'eth0'
set system sflow interface 'eth1'
set system sflow server 127.0.0.1

set service ids ddos-protection direction 'in'
set service ids ddos-protection mode 'sflow'
set service ids ddos-protection network '192.0.2.0/24'
set service ids ddos-protection sflow listen-address '127.0.0.1'
set service ids ddos-protection sflow port '6343'
set service ids ddos-protection threshold general pps '10000'
Viacheslav moved this task from Open to Finished on the VyOS 1.4 Sagitta board.