forked from dmachard/DNS-collector
-
Notifications
You must be signed in to change notification settings - Fork 0
/
use-case-11.yml
35 lines (31 loc) · 1.07 KB
/
use-case-11.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# Example 11: Add geographical metadata with GeoIP
#
# As prerequisites, we assume you have
# - a DNS server which supports DNSTap (unbound, bind, powerdns, etc) for more informations about dnstap,
# read the following page: https://dmachard.github.io/posts/0001-dnstap-testing/
# If turned on, debug messages are printed in the standard output
global:
trace:
verbose: true
multiplexer:
# Listen on tcp/6000 for incoming DNSTap protobuf messages from dns servers
# and try to add country name in metadata
collectors:
- name: tap
dnstap:
listen-ip: 0.0.0.0
listen-port: 6000
transforms:
geoip:
mmdb-country-file: "/tmp/GeoIP/GeoLite2-Country.mmdb"
# Print DNS messages on standard output with TEXT format
# Configure a custom text format to display the country name
loggers:
- name: console
stdout:
mode: text
text-format: "localtime identity queryip qname qtype rcode country"
# Routes DNS messages from the tap collector to standard output
routes:
- from: [tap]
to: [console]