Deploying as an Amazon Machine Image (AMI)

To deploy an Amazon Machine Image with Wallarm Node:

  1. Log in to you Amazon Web Services account.
  2. Launch a Wallarm Node instance.
  3. SSH to the Wallarm Node instance.
  4. Install a Wallarm license key.
  5. Connect the Wallarm Node to Wallarm Cloud.
  6. Set up filtering and proxying rules.

1. Log in to your Amazon Web Services account

Log in at aws.amazon.com.

2. Launch a Wallarm Node instance

Launch your Wallarm Node instance. See Amazon Elastic Compute Cloud: Launching an Instance.

The instance launches with a pre-installed Wallarm Node.

3. SSH to the Wallarm Node instance

See Amazon Elastic Compute Cloud: Connecting to Your Linux Instance Using SSH.

4. Install the license key

Wallarm sends the license key to the email address provided when signing up at https://my.wallarm.com/.

  1. Copy the license key to the file /etc/wallarm/license.key
  2. Set the access rights to the key:
chmod 0640 /etc/wallarm/license.key
chown root:wallarm /etc/wallarm/license.key


5. Connect the Wallarm Node to the Wallarm Cloud

The filter node interacts with the Wallarm cloud located on a remote server.

The addnode script connects the filter node to the Wallarm cloud.

  1. Run the script addnode: /usr/share/wallarm-common/addnode

  2. Enter the login and password. This is the same login and password that you use to access Wallarm console at https://my.wallarm.com. The profile must have the Administrator role and 2FA should be disabled. If the profile has the Analyst role or has 2FA enabled, the script will error out.

API Access

To interact with the Wallarm cloud, the filter node must have access to https://api.wallarm.com:444. Ensure the access is not blocked by a firewall.

6. Set up filtering and proxying rules

Uncomment the wallarm_mode string in the file /etc/nginx-wallarm/conf.d/wallarm.conf.

To uncomment, remove the # character at the beginning of the string.

By default, the directive is set to offwallarm_mode off.

Set it to monitoring.

File contents example:

#
# Wallarm module specific parameters
#

wallarm_mode monitoring;
# wallarm_mode_allow_override on;

Instance memory allocation for the Wallarm Node

Wallarm Node uses the in-memory storage Tarantool.

By default, the amount of RAM allocated to Tarantool is 75% of the total instance memory.

You can change the amount of RAM allocated for Tarantool

To allocate the instance RAM to Tarantool:

  1. Open the Tarantool configuration file:

    vi /etc/default/wallarm-tarantool

  2. Set the amount of allocated RAM in the SLAB_ALLOC_ARENA in GB. For example, to set 24 GB:

    SLAB_ALLOC_ARENA=24

  3. To apply changes, restart the Tarantool daemon:

    systemctl restart wallarm-tarantool

The installation is complete

Check that the filter node runs and filters the traffic. See Check the filter node operation.

results matching ""

    No results matching ""