The Cequence UAP integration with eBPF is available as an rpm package, a deb package, or as an unpackaged binary.
Before you begin, verify that the host system is running a Linux kernel version 4.18 or later.
Installing the Cequence eBPF Sensor on Debian or Ubuntu
This procedure installs the eBPF Sensor on a Debian or Ubuntu host.
- Download the deb package to the target host.
- At a terminal, run the following commands.
apt update
apt install sudo bash
apt install ./tls-sensor.deb
Installing the Cequence eBPF Sensor on Red Hat
This procedure installs the eBPF Sensor on a Red Hat host.
- Download the rpm package to the target host.
- At a terminal, run the following commands.
yum update
yum install sudo bash
rpm -ivh --force tls-sensor-0.1-2.x86_64.rpm
Verifying Installation
To confirm proper installation, run the following command at a terminal.
ldd <path to application> | grep -E "tls|ssl|nspr|nss"
This command prints a summary of intercepted traffic when the eBPF integration is correctly installed.
Configuring the eBPF Sensor
After installing the eBPF Sensor, update the /etc/tls-sensor.conf file by adding values for the following environmental variables.
export UAP_SUBDOMAIN=
export UAP_CLIENT_ID=
export UAP_CLIENT_SECRET=
Note: Please update the values based on your UAP installation.
- If your dashboard url is https://ui.uap.yourdomain.com, UAP_SUBDOMAIN will be set to uap.yourdomain.com
- Client ID and Client Secret needs to be created with traffic ingestion role and will be set to UAP_CLIENT_ID and UAP_CLIENT_SECRET respectively.
Enable the tls-sensor services by running the following commands at a terminal.
sudo systemctl enable tls-sensor
sudo systemctl start tls-sensor
Monitoring Sensor Logs
Run the following command at a terminal to monitor the sensor logs in real time.
tail -f /var/log/tls-sensor.log
Version History
Date | Version | Notes |
June 24, 2024 | 4 | Updated for latest sensor version. |
Mar 2, 2024 | 3 | Updated for supporting newer ingestion API in Cequence UAP. |
Oct 28, 2023 | 2 | Updated to add monitoring logs. |
July 7, 2023 | 1 | Initial version. |