Installing the agent on Amazon Linux

This guide explains how to install the Next-Gen WAF agent on Amazon Linux.

Prerequisites

Before installing the agent, you need to:

• Determine the version of Amazon Linux you want to use: Amazon Linux 2023, Amazon Linux 2, or Amazon Linux 2015.09.01. Amazon Linux 2 is most similar to CentOS 7 and reuses the same configuration. Amazon Linux 2015.09.01 is most similar to CentOS 6 and reuses the same configuration.

  Amazon Linux 2023 does not mirror CentOS as closely as it did in the past. It is a combination of multiple versions of Fedora and CentOS Stream 9. See Relationship to Fedora. As a result, the baseurl of the yum repository will use amazon/2023 as the distribution name and version number for Amazon Linux 2023.

• Copy the agent keys for the site that you want the agent to be able to access. You will use the agent keys when configuring the Next-Gen WAF agent package.

Add the package repository

Begin the agent installation by adding the version of the Amazon Linux package repository that you want to use. Add the version of the Amazon Linux package repository that you want to use.

Amazon Linux 2023

To add the Amazon Linux 2023 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/amazon/2023/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

Amazon Linux 2

To add the Amazon Linux 2 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/el/7/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

Amazon Linux 2015.09.01

To add the Amazon Linux 2015.09.01 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/el/6/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

Install and configure the Next-Gen WAF agent package

Now that you've downloaded the Amazon Linux package repository, you can install and configure the Next-Gen WAF agent package:

1. Run the following command to install the Next-Gen WAF agent package:

   $ sudo yum install sigsci-agent

2. Create an empty agent configuration file in the following directory: /etc/sigsci/agent.conf.
3. Add the agent keys for your site to the agent configuration file.

   accesskeyid = "AGENTACCESSKEYHERE"
   secretaccesskey = "AGENTSECRETACCESSKEYHERE"

4. Save the agent configuration file.

Start the Next-Gen WAF agent

Now that you've installed and configured the agent package, you can start the Next-Gen WAF agent.

If you added the Amazon Linux 2 package, run the following command to start the Next-Gen WAF agent:

$ sudo systemctl start sigsci-agent

If you added the Amazon Linux 2015.09.01 package, run the following command to start the Next-Gen WAF agent:

$ start sigsci-agent

Next steps

Explore our module options and install the Next-Gen WAF module.