-
Notifications
You must be signed in to change notification settings - Fork 161
/
dbshield.yml
94 lines (73 loc) · 2.18 KB
/
dbshield.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
##############################
### General ###
#############################
# Operating mode
# possible values:
# learning - add queries to training set (default)
# protect - take action against abnormal queries
mode: learning
# DBMS type(default: mysql)
dbms: mysql
# IP address to listen on(default: 0.0.0.0)
listenIP: 0.0.0.0
# Port number to listen on (0 means dbms default port ex. 3306 for mysql)
listenPort: 5000
# IP address of the server
targetIP: 127.0.0.1
# Port number of the dbms (0 means dbms default port ex. 3306 for mysql)
targetPort: 0
# TLS
tlsPrivateKey: cert/server-key.pem
tlsCertificate: cert/server-cert.pem
# Directory to save internal database(default: in model directory under OS's temp directory)
dbDir: "/tmp/model/"
# Connection timeout
# Valid units are "ns", "us" (or "µs"), "ms", "s", "m" and "h". (default: 5s)
timeout: 5s
# Databasse synchronisation interval, 0 will force sync after each commit.
# Valid units are "ns", "us" (or "µs"), "ms", "s", "m" and "h". (default: 5s)
SyncInterval: 5s
#############################
### HTTP Service ###
#############################
# Run http interface(default: yes)
http: yes
# Serve https (default: yes)
httpSSL: yes
# IP address to listen on(default: 127.0.0.1)
httpIP: 127.0.0.1
# Port number to listen on(default: 8070)
httpPort: 8070
# Password
httpPassword: ChangeMe
#############################
### Protect ###
#############################
# Action to take against abnormal requests
# possible values:
# drop - close the connection (default)
# pass - pass the query to server
action: drop
# Properties to check for abnormality
#
# possible values: (you can choose more than one - comma separated)
# user - username
# source - request sourece address
#
# Note: leave empty to avoid adiditional checks
additionalChecks: user,source
#############################
### Logging ###
#############################
# Log depth
# 1 warning
# 2 info
# 4 debug
# default: 3 (warning + info)
logLevel: 3
# Log path
# possible values:
# /path/to/file
# stdout
# stderr (default)
logPath: stderr