Illuminate firewall agent

 

The Illuminate solution provides advanced traffic analytics for Fusion SD-WAN. These analytics can used to block or steer traffic. This is an example to block bittorrent.

sudo apt-get install git autogen libtool build-essential
git clone https://gitlab.com/netify.ai/public/netify-fwa.git
cd netify-fwa
./autogen.sh
./configure
sudo make install
sudo service netify-fwa stop
mkdir /var/run/netify-fwa
mkdir /usr/local/var
mkdir /usr/local/var/run
mkdir /usr/local/var/run/netify-fwa
nano /etc/netifyd.conf

# Add to end of file
[socket]
listen_path[0] = /var/run/netifyd/netifyd.sock

service netifyd restart
cd /usr/local/sbin
netify-fwa -d
nano /usr/local/etc/netify-fwa/netify-fwa.ini

# Modify
interfaces-external = eth1
interfaces-internal = br0

nano /usr/local/etc/netify-fwa/netify-fwa.json

{
  "version": "1.0",
  "rules": [
        {
            "type": "block",
            "protocol": "bittorrent"
        }
],
  "whitelist": []
}

nano /lib/systemd/system/netify-fwa.service

PIDFile=/var/run/netify-fwa/netify-fwa.pid
RestartSec=9

service netify-fwa start
service netify-fwa status

This article was originally published over on LinkedIn: Illuminate firewall agent