mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-18 06:52:56 +01:00
34 lines
1005 B
INI
34 lines
1005 B
INI
{%- set interface = salt['pillar.get']('sensor:interface', '') %}
|
|
|
|
{%- if salt['pillar.get']('sensor:bro_pins')|length > 1 %}
|
|
{%- if salt['pillar.get']('sensor:bro_proxies'|length > 1) %}
|
|
{%- set proxies = salt['pillar.get']('sensor:bro_proxies') %}
|
|
{%- else %}
|
|
{%- set proxies = (salt['pillar.get']('sensor:bro_pins')|length/10)|round(0, 'ceil')|int %}
|
|
{%- endif %}
|
|
[manager]
|
|
type=manager
|
|
host=localhost
|
|
|
|
{%- for demproxies in range(proxies) %}
|
|
[proxy-{{ demproxies }}]
|
|
type=proxy
|
|
host=localhost
|
|
|
|
[worker-1]
|
|
type=worker
|
|
host=localhost
|
|
interface=af_packet::{{ interface }}
|
|
lb_method=custom
|
|
{%- if salt['pillar.get']('sensor:bro_lbprocs'|length > 1) %}
|
|
lb_procs={{ lbprocs }}
|
|
{%- else %}
|
|
lb_procs={{ salt['pillar.get']('sensor:bro_pins')|length }}
|
|
{%- endif %}
|
|
{%- if salt['pillar.get']('sensor:bro_pins'|length > 1) %}
|
|
pin_cpus={{ salt['pillar.get']('sensor:bro_pins')|join(", ") }}
|
|
{%- endif %}
|
|
af_packet_fanout_id=23
|
|
af_packet_fanout_mode=AF_Packet::FANOUT_HASH
|
|
af_packet_buffer_size=128*1024*1024
|