Management [Документация VAS Experts]

This is an old revision of the document!


4 Management

This service is configured for individual subscribers by fdpi_ctrl.

Instruction format:

fdpi_ctrl command --service 5 [Services_list] [IP_list]

The instruction syntax and IP addresses specification methods are described in details here: Control instructions.

Management of a default profile

Enable the "white list" operation for the particular subscriber with a default profile (is specified in etc/dpi/fastdpi.conf configuration file):

fdpi_ctrl load --service 5 --ip 192.168.0.1

Disable the "white list" operation for the particular subscriber:

fdpi_ctrl del --service 5 --ip 192.168.0.1

Management of a named profile

1. In order to create a named profile and activate the locking service with a profile for several subscribers

fdpi_ctrl load profile --service 5  --profile.name test_white --profile.json '{ "url_list" : "http://mysite.ru/myfile.bin" , "sni_list" : "http://mysite.ru/myfilesni.bin", "ip_list" : "http://mysite.ru/myfileip.bin", "cn_list" : "http://mysite.ru/myfilecn.bin", "redirect" : "mysite.ru/block" }'
fdpi_ctrl load --service 5 --profile.name test_white --ip 192.168.0.1
fdpi_ctrl load --service 5 --profile.name test_white --ip 192.168.0.2

here the following profile settings using the json format are specified:

  • redirect - the redirection page1)
  • url_list - white URL list
  • sni_list - white SNI list
  • ip_list - white list of IP:PORT pairs2)
  • cn_list - white list of Common Name3)
The list can be placed both on an external resource - in this case it is loaded before it is used, and in a local file, for example, "cn_list": "/tmp/cn_list.bin"

2. To search for subscribers who have an activated alert service with the specified profile name

fdpi_ctrl list all --service 5 --profile.name test_white

3. To delete a named profile(there should be no subscribers using this profile)

fdpi_ctrl del profile --service 5  --profile.name test_white

4. To change the service settings (profile) (new settings are applied to all the subscribers with a specified service profile)

fdpi_ctrl load profile --service 5 --profile.name test_white --profile.json '{ "url_list" : "http://mysite.ru/newfile.bin" , "ip_list" : "http://mysite.ru/myfileip.bin", "cn_list" : "http://mysite.ru/myfilecn.bin", "redirect" : "mysite.ru/block" }'
1)
Attention: if you specify the https site, then you have to put the given domain on the list of SNI otherwise the domain will be blocked
2) , 3)
a check against the ip:port or cname is run if the request does not contain URL or SNI