Docker container fast deployment of Suricata and XDP DDOS

Опубликовано: 09 Январь 2024
на канале: BPFire
870
11

Docker container makes it easy to deploy host based Intrusion Detection System IDS Suricata, and with the power of eBPF XDP DDOS, IDS is turned into not only monitoring system, but also stops DDOS attack right at the earliest point

docker run --rm -it --privileged --net=host --name suricata -v $(pwd)/etc/suricata:/etc/suricata -d -e SURICATA_OPTIONS="--af-packet=eno2 -vvv" -e SYNPROXY_PORTS="22,80,8080" vli39/suricata:xdp

https://github.com/vincentmli/docker-...
https://github.com/vincentmli/suricat...