zeek/scripts/base/frameworks/cluster
Arne Welzel 8edec9885a cluster/websocket: Automatic WebSocket client topic subscription
Subscribe every WebSocket client to a unique topic, by default under

    zeek/cluster/websocket/client/<identifier>/

Add tests that verify that WebSocket clients receive messages on these topics
even if they didn't explicitly pass them in their handshake message.

This is somewhere between feature and bug fix. It aids the ZeroMQ backend
implementation: A WebSocket client that doesn't provide any subscriptions
and immediately starts publishing would discard events until receiving
other nodes subscriptions from the central XPUB/XSUB proxy. ZeroMQ does sender
side topic filtering. When using subscriptions, the client waits until
its own subscriptions are returned from the central XPUB/XSUB proxy,
thereby also learning about other node's subscriptions.

Also, make the no-subscriptions.zeek test use 32 clients sequentially to
trigger potential issues more quickly.
2025-04-24 14:14:22 +02:00
..
nodes all: Fix typos identified by typos pre-commit hook 2023-06-13 17:57:32 +02:00
__load__.zeek Add backpressure disconnect notification to cluster.log and via telemetry 2024-12-06 15:18:05 -08:00
broker-backpressure.zeek Add backpressure disconnect notification to cluster.log and via telemetry 2024-12-06 15:18:05 -08:00
broker-stores.zeek Revert "Merge remote-tracking branch 'origin/topic/vern/at-if-analyze'" 2023-05-31 09:20:33 +02:00
main.zeek cluster/websocket: Automatic WebSocket client topic subscription 2025-04-24 14:14:22 +02:00
pools.zeek Pre-compute the node topics for all pool entries. 2024-12-11 15:57:01 -05:00
README More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
setup-connections.zeek cluster: Be noisy when attempting to connect to an unknown node 2024-12-12 13:01:04 +01:00
supervisor.zeek Remove deprecated Cluster::Node::interface field 2024-08-07 11:58:22 -07:00

The cluster framework provides for establishing and controlling a cluster
of Zeek instances.