Installing the agent on Red Hat

This guide explains how to install the Next-Gen WAF agent on Red Hat.

Prerequisites

Before installing the agent, you need to:

• Determine the version of Red Hat/CentOS you want to use.
• Copy the agent keys for the site that you want the agent to be able to access. You will use the agent keys when configuring the Next-Gen WAF agent package.

Add the package repository

Begin the agent installation by adding the version of the Red Hat/CentOS package repository that you want to use.

Red Hat/CentOS 9

To add the Red Hat/CentOS 9 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/el/9/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

Red Hat/CentOS 8

To add the Red Hat/CentOS 8 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/el/8/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

Red Hat/CentOS 7

To add the Red Hat/CentOS 7 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/el/7/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

Red Hat/CentOS 6

To add the Red Hat/CentOS 6 package, run the following script:

$ sudo tee /etc/yum.repos.d/sigsci.repo <<-'EOF'
[sigsci_release]
name=sigsci_release
baseurl=https://yum.signalsciences.net/release/el/6/$basearch
repo_gpgcheck=1
gpgcheck=1
enabled=1
gpgkey=https://yum.signalsciences.net/release/gpgkey https://dl.signalsciences.net/sigsci-agent/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF

Install and configure the Next-Gen WAF agent package

Now that you've downloaded the Red Hat/CentOS package repository, you can install and configure the Next-Gen WAF agent package:

1. Run the following command to install the Next-Gen WAF agent package:

   $ sudo yum install sigsci-agent

2. Create an empty agent configuration file in the following directory: /etc/sigsci/agent.conf.
3. Add the agent keys for your site to the agent configuration file.

   accesskeyid = "AGENTACCESSKEYHERE"
   secretaccesskey = "AGENTSECRETACCESSKEYHERE"

4. Save the agent configuration file.

Start the Next-Gen WAF agent

Now that you've installed and configured the agent package, you can start the Next-Gen WAF agent.

For Red Hat/CentOS versions 7 and above, run the following command to start the Next-Gen WAF agent:

$ sudo systemctl start sigsci-agent

For Red Hat/CentOS 6, run the following command to start the Next-Gen WAF agent:

$ start sigsci-agent

Optionally, enable the agent auto-update service. The service checks the Signal Sciences package downloads site for a new version of the agent and updates the agent when a new version is available.

Next steps

Explore our module options and install the Next-Gen WAF module.