Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Disable broker message forwarding by default

Browse source 
Still finding it to not be foolproof enough to enable generally for all
nodes in a cluster.  Specific/advanced use-cases may still consider
enabling, possibly just for specific nodes.
This commit is contained in:
Jon Siwek 2018-09-06 18:26:20 -05:00
parent ddcd7f3405
commit c73bb8fdc4
5 changed files with 9 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
CHANGES
View file

@ -1,4 +1,8 @@
2.5-983 | 2018-09-06 18:26:20 -0500
* Disable broker message forwarding by default (Jon Siwek, Corelight)
2.5-982 | 2018-09-06 08:58:09 -0500 2.5-982 | 2018-09-06 08:58:09 -0500
* Documentation updates (Daniel Thayer) * Documentation updates (Daniel Thayer)

2
VERSION
View file

@ -1 +1 @@
2.5-982 2.5-983

2
aux/broker

@ -1 +1 @@
Subproject commit 96c574a9de7709d73715a91368a5ef52de1af6ef Subproject commit 88242c8ca0e8745df1fe6ba115b54d9f5c160095

2
scripts/base/frameworks/broker/main.bro
View file

@ -74,7 +74,7 @@ export {
const max_sleep = 0 &redef; const max_sleep = 0 &redef;
## Forward all received messages to subscribing peers. ## Forward all received messages to subscribing peers.
const forward_messages = T &redef; const forward_messages = F &redef;
## The default topic prefix where logs will be published. The log's stream ## The default topic prefix where logs will be published. The log's stream
## id is appended when writing to a particular stream. ## id is appended when writing to a particular stream.

2
testing/btest/scripts/base/frameworks/cluster/forwarding.bro
View file

@ -28,6 +28,8 @@ global peer_count = 0;
global peers_lost = 0; global peers_lost = 0;
global fully_connected_nodes = 0; global fully_connected_nodes = 0;
redef Broker::forward_messages = T;
event forwarded_event() event forwarded_event()
{ {
print "got forwarded event"; print "got forwarded event";