| |
| en:dpi:changelog:beta_rec [2026/02/17 08:52] – created elena.krasnobryzh | en:dpi:changelog:beta_rec [2026/02/19 13:22] (current) – elena.krasnobryzh |
|---|
| {{indexmenu_n>3}} | {{indexmenu_n>3}} |
| ====== Recommendations for updating to beta version, setting up and collecting logs ====== | ======Recommendations for Updating to Beta Version, Configuration, and Log Collection====== |
| 1. Update the service to the beta version using the command: <code>yum --enablerepo vasexperts-beta update fastdpi</code>If you use the BRAS functionality and FastPCRF is located on a separate server, you must execute the following command on the FastPCRF server to update: <code>yum --enablerepo vasexperts-beta update fastpcrf</code> | |
| <note tip>Update version — 14.2 BETA2.1\\ Release date version 02.16., if no new version is visible, clear the cache: <code>yum clean all</code></note> | |
| |
| 2. In the configuration file ''/etc/dpi/fastdpi.conf'' set the following parameter value:<code> | 1. Update the service to the beta version using the command:<code>yum --enablerepo vasexperts-beta update fastdpi</code> |
| | If you are using BNG functionality and FastPCRF is located on a separate server, execute the following command on the FastPCRF server to update:<code>yum --enablerepo vasexperts-beta update fastpcrf</code> |
| | <note tip>The current version — [[en:dpi:changelog:versions:beta|14.2 BETA2.1]]\\ Release date 16.02. If the new version is not visible, clear the cache: <code>yum clean all</code></note> |
| | |
| | 2. In the configuration file ''/etc/dpi/fastdpi.conf'', set the following parameter values:<code> |
| nat_whp_max_viewq=1 | nat_whp_max_viewq=1 |
| nat_dstaddr_cache_size=0 | nat_dstaddr_cache_size=0 |
| </code> | </code> |
| <note> nat_whp_max_viewq - changes the depth of viewing\\ | <note> ''nat_whp_max_viewq'' - changes the translation view depth \\ |
| |
| nat_dstaddr_cache_size - disables postNATport sending to IPFIX, optionally, because it affects the upload of NAT broadcasts | ''nat_dstaddr_cache_size'' - disables sending postNATport in IPFIX, optional as it affects NAT translation export \\ |
| \\ | |
| |
| Optionally, if there is a shortage of ports for connections\\ | Optionally, if there is a shortage of connection ports \\ |
| nat_whp_lifetime=10 - defines the short queue time in seconds for NAT broadcast for TCP SYN, TCP FIN, UDP. This parameter overrides lifetime_flow only for NAT broadcasts. After this time, it is possible to reuse the port, but use occurs only when the port reaches the queue at a specific public IP address. It reduces the release time of ports.\\ | ''nat_whp_lifetime=10'' - sets the short queue time in seconds for NAT translation for TCP SYN, TCP FIN, UDP. This parameter overrides ''lifetime_flow'' only for NAT translations. After this time, the port may be reused, but only when the queue for that port on a specific public IP address is reached. Helps reduce port release time. \\ |
| nat_gcache_slice_k100=150 - changes the logic of port allocation, use only in the case of a small density of Private on Public less than 10:1 | ''nat_gcache_slice_k100=150'' - changes the port allocation logic, use only if the Private to Public density is low (less than 10:1) |
| </note> | </note> |
| |
| 3. Perform a restart of SSG. Please note that if FastPCRF is placed on a separate server, the fastpcrf service should be restarted on the FastPCRF server. Restart will lead to interruption of processing of subscriber traffic.\\ The restart should be performed in the following order: <code>service fastdpi stop | 3. Restart SSG. Note that if FastPCRF is on a separate server, restart the fastpcrf service on the FastPCRF server. Restart will interrupt subscriber traffic processing.\\ Restart SSG in the following order:<code>service fastdpi stop |
| service fastpcrf restart | service fastpcrf restart |
| service fastdpi start</code> | service fastdpi start</code> |
| |
| 4. Collect the dump flow with the command: <code>mkdir -p /var/log/dpi/$(date +%Y%m%d) && fdpi_cli dump flow cache > /var/log/dpi/$(date +%Y%m%d)/2_flow.txt</code> | 4. Collect a flow dump using the command:<code>mkdir -p /var/log/dpi/$(date +%Y%m%d) && fdpi_cli dump flow cache > /var/log/dpi/$(date +%Y%m%d)/2_flow.txt</code> |
| |
| 5. Backup fastdpi logs using the command: <code>tar -jcvf /var/log/dpi/BACKUPLOG_$(date +"%Y%m%d").tar.bz2 /var/log/dpi/fastdpi_*.log /var/log/dpi/fastpcrf_*.log</code> | 5. Backup fastdpi logs using the command:<code>tar -jcvf /var/log/dpi/BACKUPLOG_$(date +"%Y%m%d").tar.bz2 /var/log/dpi/fastdpi_*.log /var/log/dpi/fastpcrf_*.log</code> |
| |
| 6. Collect statistics on all CG-NAT subscribers using the command: <code>fdpi_ctrl list all status --service 11 > /var/log/dpi/$(date +%Y%m%d)/all_nat.txt</code> | 6. Collect statistics for all subscribers with CG-NAT using the command:<code>fdpi_ctrl list all status --service 11 > /var/log/dpi/$(date +%Y%m%d)/all_nat.txt</code> |
| |
| 7. Collect statistics on subscribers who have more than 800 TCP sessions: <code>fdpi_ctrl list all status --service 11 | grep -E '^[0-9]' | awk '{for(i=1;i<=NF;i++) if($i ~ /active_sess_tcp=/) {split($i,a,"="); if(a[2]+0 > 800) print}}' > /var/log/dpi/$(date +%Y%m%d)/subscriber_with_T800_nat.txt</code> | 7. Collect statistics for subscribers with more than 800 TCP sessions:<code>fdpi_ctrl list all status --service 11 | grep -E '^[0-9]' | awk '{for(i=1;i<=NF;i++) if($i ~ /active_sess_tcp=/) {split($i,a,"="); if(a[2]+0 > 800) print}}' > /var/log/dpi/$(date +%Y%m%d)/subscriber_with_T800_nat.txt</code> |
| |
| 8. Collect statistics on subscribers who have sessions of more than 800 UDP sessions: <code>fdpi_ctrl list all status --service 11 | grep -E '^[0-9]' | awk '{for(i=1;i<=NF;i++) if($i ~ /active_sess_udp=/) {split($i,a,"="); if(a[2]+0 > 800) print}}' > /var/log/dpi/$(date +%Y%m%d)/subscriber_with_U800_nat.txt</code> | 8. Collect statistics for subscribers with more than 800 UDP sessions:<code>fdpi_ctrl list all status --service 11 | grep -E '^[0-9]' | awk '{for(i=1;i<=NF;i++) if($i ~ /active_sess_udp=/) {split($i,a,"="); if(a[2]+0 > 800) print}}' > /var/log/dpi/$(date +%Y%m%d)/subscriber_with_U800_nat.txt</code> |
| |
| 9. Record the conclusions of the following commands: <code>ll -h /var/lib/dpi/proto* | 9. Record the outputs of the following commands:<code>ll -h /var/lib/dpi/proto* |
| ll -h /etc/dpi/as*</code> | ll -h /etc/dpi/as*</code> |
| |
| 10. Notify us so that we can download the log archive and dump flow from the server. You can also download them yourself and transfer them to us through any convenient file sharing service. | 10. Notify us so we can download the archive with logs and flow dump from the server. You can also download them yourself and send via any convenient file-sharing service. |
| |
