Reload godnscollector filters using SIGHUP - Githubissues

CERN-CERT / pDNSSOC

Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.

MIT License

49 stars 5 forks source link

Reload godnscollector filters using SIGHUP #19

Closed arvchristos closed 3 months ago

arvchristos commented 9 months ago

Currently, when new IOCs are introduced from MISP, we are restarting the godnscollector process as it can be seen here:

https://github.com/CERN-CERT/pDNSSOC/blob/main/files/configuration/supervisor/supervisord.conf#L25

I initially proposed a new functionality to reload filters with SIGHUP for go-dnscollector here:

https://github.com/dmachard/go-dnscollector/issues/375

Given that this is now introduced in go-dnscollector, we should test the new functionality and just send a signal instead of restarting the process.

4quarks commented 3 months ago

Issue solved by go-dnscollector and implemented https://github.com/CERN-CERT/pDNSSOC/blob/main/files/configuration/dnscollector/dnscollector.service#L7 so we can close this out.