OpenShield-XDP
Install, configure, and operate the kernel-level mitigation agent.
- InstallationInstall the OpenShield-XDP agent on a Linux server with the one-line installer, and verify it attached to your network interface.
- ConfigurationReference for /etc/openshield/openshield.yaml — metrics endpoint settings, auto_fetch mode, mitigation profile, and how to apply changes.
- Enabling metricsTurn on the OpenShield agent's metrics API, restrict it with a whitelist, and verify it with curl — plus what 401 and 403 responses mean.
- Getting credentialsPrint the metrics API URL and osk_ API key with openshield key, rotate a key, and understand how the console stores your secrets.
- Connecting a server to the dashboardAdd your OpenShield server in the console, test the connection against /health, understand each failure, and read live metrics.
- Tuning profilesHow OpenShield mitigation profiles work — baseline learning, spike thresholds, per-player token buckets, and the in-kernel Bloom whitelist.