To deploy an Amazon Machine Image with Wallarm Node:
- Log in to you Amazon Web Services account.
- Launch a Wallarm Node instance.
- SSH to the Wallarm Node instance.
- Connect the Wallarm Node to Wallarm Cloud.
- Set up filtering and proxying rules.
Log in at aws.amazon.com.
Launch your Wallarm Node instance from Amazon Marketplace. The instance will launch with a pre-installed Wallarm Node.
For the reference: Amazon Elastic Compute Cloud: Launching an Instance.
Use the admin user name to connect to the instance.
The filter node interacts with the Wallarm cloud located on a remote server.
addnode script connects the filter node to the Wallarm cloud.
Run the script
addnode:EU CloudUS Cloud
sudo /usr/share/wallarm-common/addnode -H us1.api.wallarm.com
Enter the login and password. This is the same login and password that you use to access Wallarm console at https://my.wallarm.com or https://us1.my.wallarm.com/. The profile must have the Administrator role and 2FA should be disabled. If the profile has the Analyst role or has 2FA enabled, the script will error out.
The API choice for your filter node depends on the Cloud you are using. Please, select the API accordingly:
- If you are using https://my.wallarm.com/, your node requires access to
- If you are using https://us1.my.wallarm.com/, your node requires access to
Ensure the access is not blocked by a firewall.
wallarm_mode string in the file
To uncomment, remove the
# character at the beginning of the string.
By default, the directive is set to
Set it to
File contents example:
# # Wallarm module specific parameters # wallarm_mode monitoring; # wallarm_mode_allow_override on;
Wallarm Node uses the in-memory storage Tarantool.
By default, the amount of RAM allocated to Tarantool is 75% of the total instance memory.
You can change the amount of RAM allocated for Tarantool
To allocate the instance RAM to Tarantool:
Open the Tarantool configuration file:
Set the amount of allocated RAM in the
SLAB_ALLOC_ARENAin GB. For example, to set 24 GB:
To apply changes, restart the Tarantool daemon:
systemctl restart wallarm-tarantool
Check that the filter node runs and filters the traffic. See Check the filter node operation.