github.com/perlchild/DBShield@v0.0.0-20170924200059-c888d9e40e13/conf/dbshield.yml (about) 1 ############################## 2 ### General ### 3 ############################# 4 5 # Operating mode 6 # possible values: 7 # learning - add queries to training set (default) 8 # protect - take action against abnormal queries 9 mode: learning 10 11 # DBMS type(default: mysql) 12 dbms: mysql 13 14 # IP address to listen on(default: 0.0.0.0) 15 listenIP: 0.0.0.0 16 17 # Port number to listen on (0 means dbms default port ex. 3306 for mysql) 18 listenPort: 5000 19 20 # IP address of the server 21 targetIP: 127.0.0.1 22 23 # Port number of the dbms (0 means dbms default port ex. 3306 for mysql) 24 targetPort: 0 25 26 # TLS 27 tlsPrivateKey: cert/server-key.pem 28 tlsCertificate: cert/server-cert.pem 29 30 # Directory to save internal database(default: in model directory under OS's temp directory) 31 dbDir: "/tmp/model/" 32 33 # Connection timeout 34 # Valid units are "ns", "us" (or "µs"), "ms", "s", "m" and "h". (default: 5s) 35 timeout: 5s 36 37 # Databasse synchronisation interval, 0 will force sync after each commit. 38 # Valid units are "ns", "us" (or "µs"), "ms", "s", "m" and "h". (default: 5s) 39 SyncInterval: 5s 40 41 ############################# 42 ### HTTP Service ### 43 ############################# 44 # Run http interface(default: yes) 45 http: yes 46 47 # Serve https (default: yes) 48 httpSSL: yes 49 50 # IP address to listen on(default: 127.0.0.1) 51 httpIP: 127.0.0.1 52 53 # Port number to listen on(default: 8070) 54 httpPort: 8070 55 56 # Password 57 httpPassword: ChangeMe 58 59 ############################# 60 ### Protect ### 61 ############################# 62 63 # Action to take against abnormal requests 64 # possible values: 65 # drop - close the connection (default) 66 # pass - pass the query to server 67 action: drop 68 69 # Properties to check for abnormality 70 # 71 # possible values: (you can choose more than one - comma separated) 72 # user - username 73 # source - request sourece address 74 # 75 # Note: leave empty to avoid adiditional checks 76 additionalChecks: user,source 77 78 ############################# 79 ### Logging ### 80 ############################# 81 82 # Log depth 83 # 1 warning 84 # 2 info 85 # 4 debug 86 # default: 3 (warning + info) 87 logLevel: 3 88 89 # Log path 90 # possible values: 91 # /path/to/file 92 # stdout 93 # stderr (default) 94 logPath: stderr