ksocket Documentation

Transcription

1 ksocket Documentation Fixpoint, Inc

2 i Linux Windows Linux Windows Linux Windows Linux Windows Linux (SSH) Windows (WinRM) (SNMP) AWS AWS Azure Azure (YAML )

3 4.2 (FAQ) ii

4 ksocket Kompira cloud Kompira cloud ksocket Kompira cloud ksocket : apt, yum OS ksocket Kompira cloud Kompira cloud Web UI REST API ksocket Kompira cloud ksocket : 1

5 2 1 ksocket ksocket-linux-64-<release>.<build>.tar.gz (Linux) ksocket-win-64-<release>.<build>.zip (Windows) ksoperations-networks Cent OS 6.9 Minimal (amd64) Cent OS 7 Minimal (amd64) Ubuntu Server (amd64) Ubuntu Server (amd64) Windows 10 Professional (amd64)

6 ksocket ksocket-linux-64-<release>.<build>.tar.gz ksocket-win-64-<release>.<build>.zip <release> <build> : ksocket Kompira cloud blog ksocket ksocket ksocket : ksocket ksocket Linux ksocket-linux-64-<release>.<build>.tar.gz % tar zxf ksocket-linux-64-<release>.<build>.tar.gz %./ksinstall 1. ksocket 2. Host - <space_name>.cloud.kompira.jp

7 2.1 Linux ksocket 3. ksocket token - ksocket Upstart systemd systemd OS 2.1 Upstart systemd etc/init/ /usr/lib/systemd/system/ ( CentOS/RedHat) /lib/systemd/system/ ( Ubuntu) usr/local/lib/systemd/system/ (FreeDesktop ) manual_daemon_installation Windows ksocket Windows Npcap API Npcap (0.99-r3 ) WinPcap API-compatible mode ksocket-win-64-<release>.<build>.zip ksinstall.exe 4 2

8 2.2 Npcap (0.99-r3) WinPcap API-compatible mode 1. ksocket 2. Host - <space_name>.cloud.kompira.jp 3. ksocket token - ksocket : API ksoperations-networks WinPcap Win10Pcap Npcap WinPcap Win10Pcap Npcap Fixpoint ksocket service Windows KSOCKET_HOME 2.2 ksocket OS

9 : ksocket ksocket 2 etc/ksocket - var/log/ksocket Linux # /opt/fixpoint/ksocket % cd /opt/fixpoint/ksocket # upstart % unlink /etc/init/ksocket.conf # systemd (CentOS/RedHat) % unlink /usr/lib/systemd/system/ksocket.service % unlink /etc/systemd/system/ksocket.service % unlink /etc/systemd/system/multi-user.target.wants/ksocket.service # systemd (Ubuntu) % unlink /lib/systemd/system/ksocket.service # systemd (FreeDesktop) % unlink /usr/local/lib/systemd/system/ksocket.service Windows Uninstall ksocket Fixpoint ksocket service Windows 2.3 Kompira cloud > ksocket ksocket ksocket Kompira cloud (FAQ) 6 2

10 2.3 ksocket 2.4 ksocket Linux % /opt/fixpoint/ksocket/bin/ksocket version ksocket: ksoperations-networks: Windows ksocket (PowerShell) PowerShell > ksocket version ksocket: ksoperations-networks:

11 Linux # Upstart (RHEL 6.x, CentOS 6.x, Ubuntu LTS) % restart ksocket # systemd (RHEL 7.x, CentOS 7.x, Ubuntu LTS) % systemctl ksocket restart Windows Fixpoint ksocket service Linux (SSH) ksocket IP SSH Linux SSH OS OS RPM/deb SSH Windows (WinRM) ksocket IP WinRM Windows WinRM OS OS WMI Windows 8 2

12 Windows WinRM Windows PowerShell ( ) # ExecutionPolicy Restricted RemoteSigned > Get-ExecutionPolicy Restricted > Set-ExecutionPolicy RemoteSigned > Get-ExecutionPolicy RemoteSigned # WinRM > winrm qc # Basic Basic > winrm set winrm/config/service/auth '@{Basic="true"}' > winrm set winrm/config/service '@{AllowUnencrypted="true"}' # # # > winrm configsddl default # WMI # # [ ]>[ ]>[ ] # - Root\CIMV2 [ ] # # - Root\StandardCimv2 [ ] # > wmimgmt.msc WinRM (SNMP) ksocket IP SNMP SNMP SNMP 2.7 AWS AWS EC2 Kompira cloud VPC ksocket EC2 ksocket EC AWS 9

13 : ksocket VPC : EC2 ksocket SSH/WinRM : EC2 Public IP AWS AWS EC2 ksocket AWS REST API ksocket AWS ReadOnlyAccess 1 IAM IAM ksocket AWS REST API IAM IAM ksocket AWS REST API Boto3 Credentials *1 ksocket default default awscli awscli aws configure Default output format ksocket *1 Boto3 Docs - Credentials 10 2

14 2.8 Azure Azure Virtual Machine (VM) Kompira cloud Virtual Network (VNET) ksocket VM ksocket VM : ksocket VNET : VM ksocket SSH/WinRM : VM Public IP Azure Azure VM ksocket Azure REST API ksocket Azure Reader 1 Managed Service Identity Managed Service Identity ksocket Azure Azure VM *2 Linux VM Windows VM : Service Principal Service Principal Service Principal ksocket Azure * Azure 11

15 Azure Service Principal Service Principal * 2 VM $KSOCKET_HOME/etc/ksocket/azure.toml TOML # Service Principal ID clientid = "Application ID" # Service Principal secret = "xxxxxxxxxxxxxx" # Service Principal Azure AD ID tenant = "Directory ID" 1.6 : YAML TOML 12 2

16 13 3 ksocket TOML YAML 1.1 YAML 1.6 : TOML YAML TOML : ksocket UTF $KSOCKET_HOME/etc/ksocket/ksocket.toml $KSOCKET_HOME/etc/ksocket/ksocket.yml $KSOCKET_HOME/etc/ksocket/credentials ksocket TOML ksocket YAML ( ksocket deprecated) $KSOCKET_HOME ksocket 3.2 ksocket $KSOCKET_HOME/etc/ksocket/ksocket.toml

17 # # '-' logfile = "$KSOCKET_HOME/var/log/ksocket/ksocket.log" # # - DEBUG # - INFO # - WARNING # - ERROR # - CRITICAL loglevel = "DEBUG" # # # #logformat = "%(asctime)s %(levelname)s %(name)s:%(funcname)s:%(lineno)d %(message)s" [connect] # ksocket token = "xxxxxxxx" # Websocket [wss or ws] protocol = "wss" # Kompira cloud URL host = "<space_name>.cloud.kompira.jp" # port = 443 [directories] # #credentials = "$KSOCKET_HOME/etc/ksocket/credentials" $KSOCKET_HOME/etc/ksocket/ksocket.toml.skeleton : ksocket.toml ksocket (YAML ) ksocket ksocket.toml $KSOCKET_HOME/etc/ ksocket/ksocket.yml # # '-' logfile: ${KSOCKET_HOME}/var/log/ksocket/ksocket.log 14 3

18 # # - DEBUG # - INFO # - WARNING # - ERROR # - CRITICAL loglevel: 'DEBUG' # # # #logformat: "%(asctime)s %(levelname)s %(name)s:%(funcname)s:%(lineno)d %(message)s" # connect connect: # ksocket token: 'xxxxxxxxxx' # host: '<space_name>.cloud.kompira.jp' # port: 443 # directories: # credentials: $KSOCKET_HOME/etc/ksocket/credentials 1.6 : ksocket.yaml ksocket.toml : ksocket.yml ksocket 3.3 $KSOCKET_HOME/etc/ksocket/credentials IP SSH (Secure Shell), WINRM (Windows Remote Management), SNMP (Simple Network Management Protocol)

19 SSH SSH $KSOCKET_HOME/etc/ksocket/credentials/ssh 1.6 : TOML YAML TOML # IP addresses/networks which use this credential file # IP # / , includes = [" /24", " ", " "] # IP # includes includes # excludes #excludes = [" ", " "] # 22 #port = # #timeout = 5.0 # IP # SSH # # ksocket --> > > (target IP) # #sshtunnels = [" ", " "] # [account] # username = "john" # password = "passw0rd" # # [[clientkeys]] filename = "../../id_rsa.common" passphrase = "Common password" [[clientkeys]] filename = "/root/.ssh/id_rsa" passphrase = "Admin password" clientkeys.filename 16 3

20 SSH (YAML ) # IP # / , includes: / # IP # includes includes # excludes excludes: / # account: username: john password: Passw0rd # clientkeys: - filename:../../client_keys/id_john passphrase: helloworld - filename:../../client_keys/id_rsa.common passphrase: common # 22 port: # timeout: 5.0 # IP sshtunnels: account.clientkeys[n].filename, knownhosts 1.6 : TOML WinRM WINRM $KSOCKET_HOME/etc/ksocket/credentials/winrm 1.6 : TOML YAML TOML

21 # IP # / , includes = [" /24", " ", " "] # IP # includes includes # excludes #excludes = [" ", " "] # # basic: ( ) # ntlm: NT LAN Manager (NTLM) # credssp: Credential Security Support Provider (CredSSP) #authmethod = "basic" # # auto: ( ) # always: # never: #authmessageencryption = "auto" # authmethod: credssp # true TLSv1.2 # Windows Server 2008 #authcredsspdisabletlsv1.2 = false # 5985 #port = 5985 # #timeout = 5.0 # SSH IP # SSH/WinRM # # ksocket --> > > (target IP) # # IP WinRM # SSH #sshtunnels = [" ", " "] # [account] # # # 'MYDOMAIN\\USER01' (NTLM ) # 'user01@mydomain' (UPN ) # username = "john" 18 3

22 # password = "passw0rd" : Basic NTLM authmethod ntlm NTLM WinRM (YAML ) # IP # / , includes: / # IP # includes includes # excludes excludes: / # account: # # # 'MYDOMAIN\\USER01' (NTLM ) # 'user01@mydomain' (UPN ) # username: john # password: Passw0rd # # basic: ( ) # ntlm: NT LAN Manager (NTLM) # credssp: Credential Security Support Provider (CredSSP) authmethod: ntlm # # auto: ( ) # always: # never: # authmessageencryption: always

23 # authmethod: credssp # true TLSv1.2 # Windows Server 2008 # authcredsspdisabletlsv1.2: false # 5985 port: 5985 # timeout: 5.0 # IP sshtunnels: : Basic NTLM authmethod ntlm NTLM 1.6 : TOML SNMP SNMP $KSOCKET_HOME/etc/ksocket/credentials/snmp 1.6 : TOML YAML TOML # IP # / , includes = [" /24", " ", " "] # IP # includes includes # excludes #excludes = [" ", " "] # 161 #port = 161 # #timeout =

24 # #retries = 0 # ( ) #retryinterval = 1.0 [authdata] # (SNMP v2c ) community = "public" # SNMP v3 # username = "your-username" # # usmnoauthprotocol ( default) # usmhmacmd5authprotocol (MD5(HMAC-MD5-96) ) # usmhmacshaauthprotocol (SHA(HMAC-SHA-96) ) # usmhmac128sha224authprotocol # usmhmac192sha256authprotocol # usmhmac256sha384authprotocol # usmhmac384sha512authprotocol authprotocol = "usmhmacmd5authprotocol" # #authkey = "your-password" # # usmnoprivprotocol ( default) # usmdesprivprotocol (DES(CBC-DES)) # usm3desedeprivprotocol (3DES-EDE) # usmaescfb128protocol (AES(CFB128-AES-128)) # usmaescfb192protocol (AES(CFB128-AES-192)) # usmaescfb256protocol (AES(CFB128-AES-256)) privprotocol = "usmaescfb128protocol" # privkey = "priv-your-password" SNMP (YAML ) # IP # / , includes: / # IP # includes includes # excludes

25 excludes: / authdata: # (SNMP v2c ) community: public # SNMP v3 # SNMPv3 username : your-username # # usmnoauthprotocol ( default) # usmhmacmd5authprotocol (MD5(HMAC-MD5-96) ) # usmhmacshaauthprotocol (SHA(HMAC-SHA-96) ) # usmhmac128sha224authprotocol # usmhmac192sha256authprotocol # usmhmac256sha384authprotocol # usmhmac384sha512authprotocol authprotocol : usmhmacmd5authprotocol # authkey : your-password # # usmnoprivprotocol ( default) # usmdesprivprotocol (DES(CBC-DES)) # usm3desedeprivprotocol (3DES-EDE) # usmaescfb128protocol (AES(CFB128-AES-128)) # usmaescfb192protocol (AES(CFB128-AES-192)) # usmaescfb256protocol (AES(CFB128-AES-256)) privprotocol : usmaescfb128protocol # privkey : priv-your-password # 161 port: 161 # timeout: 5.0 # retries: 0 # ( ) retryinterval: : TOML 22 3

26 3.3.2 IP 1. $KSOCKET_HOME/etc/ksocket/credentials/< > 2. _ 3. a 4. a.toml.yml b includes IP c excludes IP d INFO WARNING $KSOCKET_HOME/etc/ksocket/credentials/ssh +- 00_common.toml +- 01_specific/ +- 00_common.toml +- 02_final.toml +- _special.toml +- 02_final.toml example.toml.skeleton +- _projecta/ +- 00_common.toml +- 02_final.toml +- _special.toml +- _projectb/ +- 00_common.toml +- 02_final.toml +- _special.toml 1. 00_common.toml

27 2. 01_specific/00_common.toml 3. 01_specific/02_final.toml 4. 02_final.toml 24 3

28 ksocket ksocket ksocket loglevel = "DEBUG" (ksocket.log) support@kompira.jp 4.2 (FAQ) Q&A ksocket Kompira cloud ksocket Kompira cloud TCP 443 ksocket TCP 443 Kompira cloud ksocket ksocket ksocket ksocket Kompira cloud ksocket ksocket ksocket ksocket IP IP SNMP SNMP

29 OS Windows Linux 5.1 $KSOCKET_HOME C:\ProgramData\Fixpoint\ksocket /opt/fixpoint/ksocket

30 27 6 ksocket ksocket Kompira cloud ksocket Kompira cloud ksocket

31

32 29 ksocket, 27, 27, 27