redBorder client proxy is a software that has minimum requirements in order to function correctly.The minimum essential elements required for installation as well as those recommended for correct performance. They are shown in the following table:
|RAM||1 GB||2 GB|
|Processor||1 Core||2 Core|
||16 GB||32 GB|
Downloading the ISO
In order to download the ISO image, we must be registered.
Once we are logged in to the redborder web, we must go to Community -> Downloads. On this page we will find all of the redborder editions along with their corresponding specifications and characteristics.
To download the redborder client Proxy, click on DOWNLOAD in the redborder Client proxy section:
Burning the ISO Image
The ISO image is prepared to perform the boot from a DVD reader, USB device or as an ISO file for a virtual machine.
In order to burn the ISO image from a Linux system to a USB device, the following command needs to be used if the USB device is mapped in /dev/sdd:
[root@machine ~]# dd if=redBorder-3.1.68-2-x86_64-6.5-proxy.iso of=/dev/sdd bs=10M
Installing the ISO
Once we have booted the redborder ISO, we will see the installation menu. To perform the installation, select the option: Install Client Proxy:
Once in the installation process, the user only needs to confirm the installation destination and root password. redborder is prepared for unattended installations and so we should be especially careful with the time we have to respond to these three questions if we wish to modify the default options:
Once this page has been confirmed, the installation will carry out all of the necessary processes to prepare the system for configuration.
By default, the root password will be redborder.
Upon completing the installation process, we can enter the system with the root user and password (redborder by default):
We must note various important parameters on this screen depending on the scenario where the client proxy is going to be placed.
- UUID: is the universally unique identifier that identifies the client proxy machine. We will need it in order to register in redborder Live.
- IP Address: client proxy IP address
- Collector Addresses: Listening ports where the client proxy is going to be collecting the different types of flow (1 port for each type of flow).
Registering the redborder client proxy in redborder Live
In order to register the sensor in redborder Live, we must have a redborder account.
In order to register in redborder Live, we must access: https://www.redborder.com. Click on try redborder, in the upper right of the screen.
Fill out the form and click on Register. We will need to confirm the email in order to finish the process.
Now, we must go the redborder Live login page. The link for this page is: https://live.redborder.com. We will log in with the same email address and password that we used in the registration.
Go to Sensors and press + Claim Sensor:
A pop-up window will appear where we must enter a name for the sensor and paste the UUID that we copied before in the field below.
Click on save and wait until the sensor is configured correctly. We can then verify that the sensor is working in redborder Live.
Add a Flow sensor
To add a flow sensor must click on the Edit button -> Add sensor -> Flow:
A pop-up window then appears which asks us for a name and the IP address from which the flow of data is being received:
By going to the upper FLOW tab, we can verify that the traffic that was initially receiving the Client Proxy is now classified as Sensor Flow. Once we have created the different flow sensors, the traffic can be viewed separately: