68 lines
1.6 KiB
Markdown
68 lines
1.6 KiB
Markdown
# Wallarm Docker Node Manager
|
|
|
|
Single-command Docker-based deployment for Wallarm filtering nodes.
|
|
Multiple nodes on one host, no conflicts, zero native dependencies.
|
|
|
|
## Quick Start
|
|
|
|
```bash
|
|
curl -fsSL "https://git.sechpoint.app/customer-engineering/wallarm/raw/branch/main/setup.sh" | bash
|
|
sudo /opt/fw/deploy.sh
|
|
```
|
|
|
|
Setup installs Python + Docker, downloads deploy script. Menu handles everything.
|
|
|
|
## Menu
|
|
|
|
```
|
|
[1] Deploy all Deploy all nodes from fw.conf
|
|
[2] Add a node Interactive config + deploy
|
|
[3] Status Show running containers
|
|
[4] Remove a node Stop + delete container
|
|
[5] Edit a node Update port, upstream, mode in fw.conf
|
|
```
|
|
|
|
## Configuration
|
|
|
|
`/opt/fw/app/fw.conf` — JSON with node configs:
|
|
|
|
```json
|
|
{
|
|
"srv1": {
|
|
"token": "your-wallarm-token",
|
|
"cloud": "EU",
|
|
"port": "8081",
|
|
"upstream_ip": "10.1.0.10",
|
|
"upstream_port": "8081",
|
|
"mode": "monitoring"
|
|
}
|
|
}
|
|
```
|
|
|
|
## Architecture
|
|
|
|
```
|
|
deploy.py Single Python file, ~200 lines
|
|
├── Docker image: wallarm/node:6.13.0
|
|
├── Named volumes for persistence
|
|
└── Unique ports per node
|
|
|
|
/opt/fw/
|
|
├── deploy.sh Entry wrapper
|
|
├── app/
|
|
│ ├── main.py Deploy script
|
|
│ ├── fw.conf Node config
|
|
│ └── state.json Deployment state
|
|
└── wallarm-aio.sh Cached installer (native fallback)
|
|
```
|
|
|
|
## Requirements
|
|
|
|
- Linux with systemd
|
|
- Docker (auto-installed by setup.sh)
|
|
- Python 3.10+ (auto-installed by setup.sh)
|
|
- Outbound to api.wallarm.com (EU) or us1.api.wallarm.com (US)
|
|
|
|
## Remote Assistance
|
|
|
|
See [JUMP_SERVER.md](JUMP_SERVER.md) for jump server setup.
|