Curiefense

Curiefense includes a command-line tool called curieconf_cli.

If you wanted to get the detailed list of existing configurations you would run:

$ curieconf_cli conf list

You can also just use cURL to accomplish the same task:

$ curl -XGET $api_url/configs/

Traffic filtering is performed by the Curiefense proxy, as shown in the first diagram above. In other words, this is where the security policies defined in the Configurations are enforced.

Some activities (such as rate-limiting) require local data storage. Internally, Curiefense uses Redis for this.

The docker-compose deployment process will create Grafana visualizations for Curiefense's traffic data. Curiefense comes with two dashboards out of the box: Traffic Overview and Top Activities. They are available at http://curie.demo:30300/.

curiefense_db_hostname defines the hostname of the PostgreSQL server that will be used to store logs. Defaults to the provided logdb StatefulSet (via Kubernetes workload API). Override this to replace the postgres instance with one you supply, or an Amazon Aurora instance.