Management [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:dpi_options:opt_filtration:filtration_ctrl [2020/02/05 17:29] – ↷ Page moved from en:dpi:dpi_options:base_functionality:opt_filtration:filtration_ctrl to en:dpi:dpi_options:opt_filtration:filtration_ctrl lexx26en:dpi:dpi_options:opt_filtration:filtration_ctrl [2024/11/29 10:19] (current) – elena.krasnobryzh
    Line 1: Line 1:
    -====== 3 Management ======+{{tag>Services "Service 4" Filtering Blacklist "Service 49" "IPv6 Blocking"}} 
     + 
     +====== Management ====== 
     +{{indexmenu_n>3}} 
     +In order to filter a traffic of some particular subscribers, or exclude filtering of transit traffic, or provide filtering to other operators as a service - you will need to activate Subscriber Management to control this service. Please add configuration parameter to the file /etc/dpi/fastdpi.conf to activate: 
     + 
     +<code>black_list_sm=1</code> 
     + 
     +As a result, this service is configured on level of individual subscribers by [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd|fdpi_ctrl]]. 
     + 
     +Instruction format: 
     +<code> 
     +fdpi_ctrl command --service 4 [IP_list] 
     +</code> 
     +<note important>You can find more details on the instruction syntax and IP specification methods here: [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd|Control instructions]]</note> 
     + 
     +<note tip>When the service is activated, only TCP traffic is blocked. To block UDP traffic as well, you must [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd#configuring_tcp_and_udp_protocol_blocking|enable the]] ''[[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd#configuring_tcp_and_udp_protocol_blocking|udp_block]]'' parameter.</note> 
     + 
     +Examples: 
     + 
     +Activate the service for all subscribers and switch filtering off for an administrator: 
     +<code> 
     +fdpi_ctrl load --service 4 --cidr 192.168.0.0/24 
     +fdpi_ctrl del --service 4 --ip 192.168.0.1 
     +</code> 
     + 
     +Enable the service for an independent system AS50538: 
     +<code> 
     +fdpi_ctrl load --service 4 --cidr 37.110.240.0/21 --cidr 109.235.216.0/21 
     +</code> 
     +  
     +Creating named profile and activating it to several subcribers 
     +<code> 
     +fdpi_ctrl load profile --service 4  --profile.name test_black --profile.json '{ "url_list" : "http://mysite.ru/myfile.bin" , "ip_list" : "http://mysite.ru/myfileip.bin", "cn_list" : "http://mysite.ru/myfilecn.bin", "redirect" : "http://mysite.ru/block", "federal" : 0 }' 
     +fdpi_ctrl load --service 4 --profile_name test_black --ip 192.168.0.1 
     +fdpi_ctrl load --service 4 --profile_name test_black --ip 192.168.0.2 
     +</code> 
     +here\\ 
     +in json format sets folowing profiles' parameters\\  
     +redirect - web page to redirect to\\  
     +federal : 0/1/2/etc. using local athorities blacklist\\  
     +url_list - URL blacklist\\  
     +ip_list - IP:PORT  blacklist\\  
     +cn_list - Common Name blacklist 
     + 
     +Blacklist can be loaded from external source, like "http://mysite.ru/myfilecn.bin", or in a local file, like "cn_list" : "/tmp/cn_list.bin" 
     + 
     +Searching subscribers with named profile: 
     +<code> 
     +fdpi_ctrl list all --service 4 --profile.name test_black</code> 
     + 
     +Deleting subscribers with named profile (the named profile has no subscribers using it) 
     +<code> 
     +fdpi_ctrl del profile --service 4  --profile.name test_black 
     +</code> 
     + 
     +Changing parameters of named profile (new settings apply to all subscribers with the named profile) 
     +<code> 
     +fdpi_ctrl load profile --service 4 --profile.name test_black --profile.json '{ "url_list" : "http://mysite.ru/myfile.bin" , "ip_list" : "http://mysite.ru/myfileip.bin", "cn_list" : "http://mysite.ru/myfilecn.bin", "redirect" : "http://mysite.ru/block", "federal" : false }' 
     +</code> 
     + 
     +Maximum number of profiles for blacklist service is configuerd by a parameter in /etc/dpi/fastdpi.conf 
     +<code> 
     +max_profiles_black_list=64 
     +</code> 
     +here\\ 
     +64 default value, 65535 maximum value\\ 
     +<note warning>The parameter is applied after service restart.</note> 
     + 
     +=====Activation of IPv6 traffic blocking service===== 
     +Instruction format: 
     +<code bash> 
     +fdpi_ctrl command --service 49 [Services_list] [IP_list or login] 
     +</code> 
     +<note important>You can find more details on the instruction syntax and IP specification methods here: [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd|Control instructions]]</note> 
     + 
     +Activate the service: 
     +<code bash> 
     +fdpi_ctrl load --service 49 --login DEMO 
     +</code> 
     +or 
     +<code bash> 
     +fdpi_ctrl load --service 49 --vchannel 1 
     +</code> 
     + 
     +<note tip>When the service is activated, only TCP traffic is blocked. To block UDP traffic as well, you must [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd#configuring_tcp_and_udp_protocol_blocking|enable the]] ''[[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd#configuring_tcp_and_udp_protocol_blocking|udp_block]]'' parameter.</note>