中文版本(Chinese version)

DongTai-Engine is used to process the data collected by the DongTai probe, and its functions are as follows：

1. Analyze whether there are vulnerabilities in HTTP/HTTPS/RPC requests based on method pool data and taint tracking algorithms
2. Handle vulnerability verification requests regularly
3. Regularly update the vulnerabilities in the components
4. Regularly clean up expired log data
5. Regularly maintain the status of the probe detection engine

Basic services：MySql、Redis

The basic service configuration is as follows：

1. Pull image

$ docker pull registry.cn-beijing.aliyuncs.com/huoxian_pub/dongtai-engine:latest

2. Create a configuration file：/etc/dongtai/config.ini，The content is as follows：

[mysql]
host = 127.0.0.1
port = 3306
name = dongtai_webapi
user = dongtai
password = dongtai-iast

[redis]
host = 127.0.0.1
port = 6379
password = 123456
db = 0

; The following content unused, keep the default
[engine]
url = http://engine_url


[smtp]
server = server
user = user
password = password
from_addr = from_addr
ssl = False
cc_addr = cc_addr

[aliyun_oss]
access_key = access_key
access_key_secret = access_key

3. Start the dongtai-engine container and map the configuration file

$ docker run -d --name dongtai-engine -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest

4. Start the dongtai-engine-task container and map the configuration file

$ docker run -d --name dongtai-engine-task -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest bash /opt/dongtai/engine/docker/entrypoint.sh

1. Build image

$ docker build -t secnium/iast-saas-engine:latest .

2. Create a configuration file：/etc/dongtai/config.ini，The content is as follows：

[mysql]
host = 127.0.0.1
port = 3306
name = dongtai_webapi
user = dongtai
password = dongtai-iast

[redis]
host = 127.0.0.1
port = 6379
password = 123456
db = 0

; The following content unused, keep the default
[engine]
url = http://engine_url

[smtp]
server = server
user = user
password = password
from_addr = from_addr
ssl = False
cc_addr = cc_addr

[aliyun_oss]
access_key = access_key
access_key_secret = access_key

3. Start the dongtai-engine container and map the configuration file

$ docker run -d --name dongtai-engine -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest

4. Start the dongtai-engine-task container and map the configuration file

$ docker run -d --name dongtai-engine-task -v /etc/dongtai/config.ini:/opt/dongtai/engine/conf/config.ini --restart=always secnium/iast-saas-engine:latest bash /opt/dongtai/engine/docker/entrypoint.sh

Contributions are welcomed and greatly appreciated. See CONTRIBUTING.md for details on submitting patches and the contribution workflow.

Any questions? Let's discuss in #DongTai discussions

• Documentation
• DongTai WebSite