
The Whale Sentinel Services
Whale Sentinel Services is the centralized backend of the Whale Sentinel threat detection ecosystem. These microservices perform real-time threat detection, agent coordination, DGA analysis, and web attack inspection, enabling deep security observability and active protection for connected applications.
| No. | Service Name | Language | Docker Image | Version |
|---|---|---|---|---|
| 1 | whale-sentinel-common-attack-detection | Go 1.24.0 | Image | 0.1.3 |
| 2 | whale-sentinel-configuration-service | Go 1.24.0 | Image | 0.1.3 |
| 3 | whale-sentinel-dga-detection | Python 3.12 | Image | 0.1.3 |
| 4 | whale-sentinel-web-attack-detection | Python 3.12 | Image | 0.1.3 |
| 5 | whale-sentinel-gateway-service | Go 1.24.0 | Image | 0.1.3 |
Create an IAM User
AWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYCreate a Secret in AWS Secrets Manager
AWS_SECRET_NAMEWHALE_SENTINEL_AGENT_SECRET_KEY_NAMEWHALE_SENTINEL_SERVICE_SECRET_KEY_NAMEWHALE_SENTINEL_CONTROLLER_SECRET_KEY_NAMEmv docker-compose.example.yml docker-compose.yml
redis/redis.conf and docker-compose.yml.Update the following values in docker-compose.yml, fluent-bit.conf, and .env:
docker-compose up -d
We welcome contributions and feedback. Please fork the repository and open a pull request with your suggested changes.
This project is licensed under the MIT License.
If you discover a vulnerability, please report it responsibly via GitHub Issues or contact the maintainers privately.
| Key | Description | Example |
|---|
AWS_REGION | AWS deployment region | us-west-2 |
AWS_ACCESS_KEY_ID | IAM access key | AKIA... |
AWS_SECRET_ACCESS_KEY | IAM secret key | abc123... |
AWS_SECRET_NAME | Secret name in Secrets Manager | whale-prod-secret |
WHALE_SENTINEL_AGENT_SECRET_KEY_NAME | Agent secret key field | agent-secret-key |
WHALE_SENTINEL_SERVICE_SECRET_KEY_NAME | Service secret key field | service-secret-key |
WHALE_SENTINEL_CONTROLLER_SECRET_KEY_NAME | Controller secret key field | controller-secret-key |
REDIS_PASSWORD | Redis access password | supersecurepass |
WS_CONTROLLER_PROCESSOR_URL | Whale MDP endpoint URL | http://controller:8080/processor |
OPENSEARCH_ENDPOINT | OpenSearch endpoint | https://search-xyz.us-west-2.es.amazonaws.com |
OPENSEARCH_USERNAME | OpenSearch user | admin |
OPENSEARCH_PASSWORD | OpenSearch password | password123 |