diff --git a/docker-compose.yml b/docker-compose.yml index 345a6f9..e77cb22 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -100,14 +100,20 @@ services: - net.ipv4.tcp_keepalive_time=180 ports: - 9005:9005 - - 8080:8080 + volumes: - ${OBMP_DATA_ROOT}/config:/config environment: - MEM=4 # Set memory to at least 2GB but ideally 4GB - KAFKA_FQDN=obmp-kafka:29092 + - RPKI_URL=https://rpki.cloudflare.com/rpki.json # define the URL to retrieve json endoed RPKI data + - RPKI_PASS=None + - RPKI_USER=None - ENABLE_RPKI=1 # 1 enables, 0 disables RPKI sync - ENABLE_IRR=1 # 1 enables, 0 disables IRR sync + - POSTGRES_REPORT_WINDOW='8 minute' # default POSTGRESS window to select when building + # summary tables. For deployments that absorb large + # bursts increase the value, ex 60 minute - POSTGRES_PASSWORD=openbmp - POSTGRES_USER=openbmp - POSTGRES_DB=openbmp diff --git a/psql-app/Dockerfile b/psql-app/Dockerfile index 055d8d0..2973d01 100644 --- a/psql-app/Dockerfile +++ b/psql-app/Dockerfile @@ -62,9 +62,6 @@ VOLUME ["/config"] # Consumer JMX console EXPOSE 9005 -# RPKI Validator port -EXPOSE 8080 - #---------------------------------- # Define working directory. WORKDIR /tmp @@ -85,23 +82,11 @@ RUN cd /tmp && curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py \ RUN pip install ipaddr pykafka +RUN pip3 install urllib3 requests + # Cleanup RUN apt-get autoremove && apt-get clean -#---------------------------------- -# Install RPKI validator (https://github.com/RIPE-NCC/rpki-validator-3/wiki) -RUN mkdir /usr/local/rpki && cd /tmp \ - && wget https://ftp.ripe.net/tools/rpki/validator3/prod/generic/rpki-validator-3-latest-dist.tar.gz \ - && tar xzf rpki-validator-3-latest-dist.tar.gz \ - && cd rpki-validator-*/ \ - && mv * /usr/local/rpki/ \ - && rm -rf /tmp/rpki-* \ - && cd /usr/local/rpki \ - && sed -i -r 's/.*server.address=.*/server.address=0.0.0.0/' /usr/local/rpki/conf/application.properties \ - && sed -i -r 's/jvm.mem.maximum=.*/jvm.mem.maximum=2g/' /usr/local/rpki/conf/application.properties - - -#---------------------------------- # Define default command. CMD ["/usr/sbin/run"] diff --git a/psql-app/scripts/run b/psql-app/scripts/run index 73961c0..2cea785 100755 --- a/psql-app/scripts/run +++ b/psql-app/scripts/run @@ -108,15 +108,10 @@ enable_rpki() { MAILTO="" # Update RPKI -31 */2 * * * root . /usr/local/openbmp/pg_profile && /usr/local/openbmp/rpki_validator.py -u $PGUSER -p $PGPASSWORD -s 127.0.0.1:8080 $PGHOST +31 */2 * * * root . /usr/local/openbmp/pg_profile && /usr/local/openbmp/rpki_validator.py -u $PGUSER -p $PGPASSWORD -s $RPKI_URL --rpkipassword $RPKI_PASS --rpkiuser $RPKI_USER $PGHOST SETVAR - echo "===> Downloading and Installing ARIN TAL" - wget -q https://www.arin.net/resources/manage/rpki/arin-rfc7730.tal -O /usr/local/rpki/preconfigured-tals/arin.tal - - # start RPKI validator - /usr/local/rpki/rpki-validator-3.sh > /var/log/rpki-validator.log & } # ----------------------------------------------- @@ -149,7 +144,7 @@ MAILTO="" 6 */2 * * * root . /usr/local/openbmp/pg_profile && /usr/local/openbmp/gen_whois_asn.py -u $PGUSER -p $PGPASSWORD $PGHOST >> /var/log/asn_load.log # Update aggregation table stats -*/3 * * * * root . /usr/local/openbmp/pg_profile && psql -c "select update_chg_stats('8 minute')" +*/3 * * * * root . /usr/local/openbmp/pg_profile && psql -c "select update_chg_stats($POSTGRES_REPORT_WINDOW)" # Update peer rib counts */15 * * * * root . /usr/local/openbmp/pg_profile && psql -c "select update_peer_rib_counts()"