DenozordecandCursor
ebadf70e2b
API, UI, Linux/MikroTik agents, IP lists, политики, stats, CI и интеграция с auth-portal/EvoBGP. Co-authored-by: Cursor <[email protected]>
29 lines
792 B
Markdown
29 lines
792 B
Markdown
# Agents
|
|
|
|
## Linux
|
|
|
|
```bash
|
|
curl -fsSL https://<cp>/v1/agent/install.sh | \
|
|
EVOFW_CP_URL=https://<cp> \
|
|
EVOFW_SEED=<seed> \
|
|
EVOFW_CLIENT_NAME="web-01" \
|
|
bash
|
|
```
|
|
|
|
Файлы: `/etc/evofw/agent.conf`, `/usr/local/sbin/evofw-firewall.sh`, timer `evofw-firewall.timer` (default 1min).
|
|
|
|
Backend auto-detect: nft → ipset → iptables.
|
|
|
|
Whitelist: nft chain policy drop + allow set. Blacklist: policy accept + deny set.
|
|
|
|
## MikroTik
|
|
|
|
Скачайте `/v1/agent/mikrotik-install.rsc`, задайте globals `EvofwCpUrl`, `EvofwSeed`, `EvofwName`, import. Scheduler каждую минуту тянет policy. Настройте filter на address-list `EVOFW_DENY` / `EVOFW_ALLOW`.
|
|
|
|
## Force sync
|
|
|
|
```bash
|
|
sudo rm -f /var/lib/evofw/last_hash
|
|
sudo /usr/local/sbin/evofw-firewall.sh
|
|
```
|