| Both sides previous revisionPrevious revision | |
| en:dpi:changelog:beta_rec [2026/02/19 13:22] – elena.krasnobryzh | en:dpi:changelog:beta_rec [2026/06/15 15:25] (current) – removed elena.krasnobryzh |
|---|
| {{indexmenu_n>3}} | |
| ======Recommendations for Updating to Beta Version, Configuration, and Log Collection====== | |
| |
| 1. Update the service to the beta version using the command:<code>yum --enablerepo vasexperts-beta update fastdpi</code> | |
| If you are using BNG functionality and FastPCRF is located on a separate server, execute the following command on the FastPCRF server to update:<code>yum --enablerepo vasexperts-beta update fastpcrf</code> | |
| <note tip>The current version — [[en:dpi:changelog:versions:beta|14.2 BETA2.1]]\\ Release date 16.02. If the new version is not visible, clear the cache: <code>yum clean all</code></note> | |
| |
| 2. In the configuration file ''/etc/dpi/fastdpi.conf'', set the following parameter values:<code> | |
| nat_whp_max_viewq=1 | |
| nat_dstaddr_cache_size=0 | |
| </code> | |
| <note> ''nat_whp_max_viewq'' - changes the translation view depth \\ | |
| |
| ''nat_dstaddr_cache_size'' - disables sending postNATport in IPFIX, optional as it affects NAT translation export \\ | |
| |
| Optionally, if there is a shortage of connection ports \\ | |
| ''nat_whp_lifetime=10'' - sets the short queue time in seconds for NAT translation for TCP SYN, TCP FIN, UDP. This parameter overrides ''lifetime_flow'' only for NAT translations. After this time, the port may be reused, but only when the queue for that port on a specific public IP address is reached. Helps reduce port release time. \\ | |
| ''nat_gcache_slice_k100=150'' - changes the port allocation logic, use only if the Private to Public density is low (less than 10:1) | |
| </note> | |
| |
| 3. Restart SSG. Note that if FastPCRF is on a separate server, restart the fastpcrf service on the FastPCRF server. Restart will interrupt subscriber traffic processing.\\ Restart SSG in the following order:<code>service fastdpi stop | |
| service fastpcrf restart | |
| service fastdpi start</code> | |
| |
| 4. Collect a flow dump using the command:<code>mkdir -p /var/log/dpi/$(date +%Y%m%d) && fdpi_cli dump flow cache > /var/log/dpi/$(date +%Y%m%d)/2_flow.txt</code> | |
| |
| 5. Backup fastdpi logs using the command:<code>tar -jcvf /var/log/dpi/BACKUPLOG_$(date +"%Y%m%d").tar.bz2 /var/log/dpi/fastdpi_*.log /var/log/dpi/fastpcrf_*.log</code> | |
| |
| 6. Collect statistics for all subscribers with CG-NAT using the command:<code>fdpi_ctrl list all status --service 11 > /var/log/dpi/$(date +%Y%m%d)/all_nat.txt</code> | |
| |
| 7. Collect statistics for subscribers with more than 800 TCP sessions:<code>fdpi_ctrl list all status --service 11 | grep -E '^[0-9]' | awk '{for(i=1;i<=NF;i++) if($i ~ /active_sess_tcp=/) {split($i,a,"="); if(a[2]+0 > 800) print}}' > /var/log/dpi/$(date +%Y%m%d)/subscriber_with_T800_nat.txt</code> | |
| |
| 8. Collect statistics for subscribers with more than 800 UDP sessions:<code>fdpi_ctrl list all status --service 11 | grep -E '^[0-9]' | awk '{for(i=1;i<=NF;i++) if($i ~ /active_sess_udp=/) {split($i,a,"="); if(a[2]+0 > 800) print}}' > /var/log/dpi/$(date +%Y%m%d)/subscriber_with_U800_nat.txt</code> | |
| |
| 9. Record the outputs of the following commands:<code>ll -h /var/lib/dpi/proto* | |
| ll -h /etc/dpi/as*</code> | |
| |
| 10. Notify us so we can download the archive with logs and flow dump from the server. You can also download them yourself and send via any convenient file-sharing service. | |
| |
