DongTai-Engine is used to process the data collected by the DongTai probe, and its functions are as follows：
- Analyze whether there are vulnerabilities in HTTP/HTTPS/RPC requests based on method pool data and taint tracking algorithms
- Handle vulnerability verification requests regularly
- Regularly update the vulnerabilities in the components
- Regularly clean up expired log data
- Regularly maintain the status of the probe detection engine
Basic services：MySql、Redis
The basic service configuration is as follows：
| service name | ip | port | additional |
|---|---|---|---|
| MySql | 127.0.0.1 | 3306 | account：dongtai password：dongtai-iast database name：dongtai_webapi |
| Redis | 127.0.0.1 | 6379 | password：123456 Redis db：0 |
- Pull image
$ docker pull registry.cn-beijing.aliyuncs.com/huoxian_pub/dongtai-engine:latest- Create a configuration file：
/etc/dongtai/config.ini，The content is as follows：
[mysql]
host = 127.0.0.1
port = 3306
name = dongtai_webapi
user = dongtai
password = dongtai-iast
[redis]
host = 127.0.0.1
port = 6379
password = 123456
db = 0
; The following content unused, keep the default
[engine]
url = http://engine_url
[smtp]
server = server
user = user
password = password
from_addr = from_addr
ssl = False
cc_addr = cc_addr
[aliyun_oss]
access_key = access_key
access_key_secret = access_key- Start the
dongtai-enginecontainer and map the configuration file
$ docker run -d --name dongtai-engine -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest- Start the
dongtai-engine-taskcontainer and map the configuration file
$ docker run -d --name dongtai-engine-task -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest bash /opt/dongtai/engine/docker/entrypoint.sh- Build image
$ docker build -t secnium/iast-saas-engine:latest .- Create a configuration file：
/etc/dongtai/config.ini，The content is as follows：
[mysql]
host = 127.0.0.1
port = 3306
name = dongtai_webapi
user = dongtai
password = dongtai-iast
[redis]
host = 127.0.0.1
port = 6379
password = 123456
db = 0
; The following content unused, keep the default
[engine]
url = http://engine_url
[smtp]
server = server
user = user
password = password
from_addr = from_addr
ssl = False
cc_addr = cc_addr
[aliyun_oss]
access_key = access_key
access_key_secret = access_key- Start the
dongtai-enginecontainer and map the configuration file
$ docker run -d --name dongtai-engine -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest- Start the
dongtai-engine-taskcontainer and map the configuration file
$ docker run -d --name dongtai-engine-task -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest bash /opt/dongtai/engine/docker/entrypoint.shContributions are welcomed and greatly appreciated. See CONTRIBUTING.md for details on submitting patches and the contribution workflow.
Any questions? Let's discuss in #DongTai discussions
