mirror of
https://github.com/bytedance/g3.git
synced 2026-04-28 03:30:31 +00:00
127 lines
2.7 KiB
ReStructuredText
127 lines
2.7 KiB
ReStructuredText
.. _configuration_auditor:
|
|
|
|
*******
|
|
Auditor
|
|
*******
|
|
|
|
The type for each auditor config is *map*, the keys are as follows:
|
|
|
|
name
|
|
----
|
|
|
|
**required**, **type**: str
|
|
|
|
Set the auditor name, which will can be referenced in :ref:`server config <conf_server_common_auditor>`.
|
|
|
|
protocol_inspection
|
|
-------------------
|
|
|
|
**optional**, **type**: :ref:`protocol inspection <conf_value_dpi_protocol_inspection>`
|
|
|
|
Set basic config for protocol inspection.
|
|
|
|
**default**: set with default value
|
|
|
|
server_tcp_portmap
|
|
------------------
|
|
|
|
**optional**, **type**: :ref:`server tcp portmap <conf_value_dpi_server_tcp_portmap>`
|
|
|
|
Set the portmap for protocol inspection based on server side tcp port.
|
|
|
|
**default**: set with default value
|
|
|
|
client_tcp_portmap
|
|
------------------
|
|
|
|
**optional**, **type**: :ref:`client tcp portmap <conf_value_dpi_client_tcp_portmap>`
|
|
|
|
Set the portmap for protocol inspection based on client side tcp port.
|
|
|
|
**default**: set with default value
|
|
|
|
tls_cert_generator
|
|
------------------
|
|
|
|
**optional**, **type**: :ref:`tls cert generator <conf_value_dpi_tls_cert_generator>`
|
|
|
|
Set certificate generator for TLS interception.
|
|
|
|
If not set, TLS interception will be disabled.
|
|
|
|
**default**: not set
|
|
|
|
tls_interception_client
|
|
-----------------------
|
|
|
|
**optional**, **type**: :ref:`tls interception client <conf_value_dpi_tls_interception_client>`
|
|
|
|
Set the tls client config for server handshake in TLS interception.
|
|
|
|
**default**: set with default value
|
|
|
|
log_uri_max_chars
|
|
-----------------
|
|
|
|
**optional**, **type**: usize
|
|
|
|
Set the max chars for the log of URI.
|
|
|
|
**default**: 1024
|
|
|
|
h1_interception
|
|
---------------
|
|
|
|
**optional**, **type**: :ref:`h1 interception <conf_value_dpi_h1_interception>`
|
|
|
|
Set http 1.x interception config.
|
|
|
|
**default**: set with default value
|
|
|
|
h2_interception
|
|
---------------
|
|
|
|
**optional**, **type**: :ref:`h2 interception <conf_value_dpi_h2_interception>`
|
|
|
|
Set http 2.0 interception config.
|
|
|
|
**default**: set with default value
|
|
|
|
icap_reqmod_service
|
|
-------------------
|
|
|
|
**optional**, **type**: :ref:`icap service config <conf_value_audit_icap_service_config>`
|
|
|
|
Set the ICAP REQMOD service config.
|
|
|
|
**default**: not set
|
|
|
|
.. versionadded:: 1.7.3
|
|
|
|
icap_respmod_service
|
|
--------------------
|
|
|
|
**optional**, **type**: :ref:`icap service config <conf_value_audit_icap_service_config>`
|
|
|
|
Set the ICAP RESPMOD service config.
|
|
|
|
**default**: not set
|
|
|
|
.. versionadded:: 1.7.3
|
|
|
|
.. _conf_auditor_application_audit_ratio:
|
|
|
|
application_audit_ratio
|
|
-----------------------
|
|
|
|
**optional**, **type**: :ref:`random ratio <conf_value_random_ratio>`
|
|
|
|
Set the application audit (like ICAP REQMOD/RESPMOD) ratio for incoming requests.
|
|
|
|
This also controls whether protocol inspection is really enabled for a specific request.
|
|
|
|
User side settings may override this.
|
|
|
|
**default**: 1.0
|
|
|
|
.. versionadded:: 1.7.4
|