一个使用 Rust 编写的高性能 TAXII（可信自动化指标信息交换，Trusted Automated eXchange of Indicator Information）服务器。
EclecticIQ OpenTAXII 的 Rust 移植版本，与数据库完全兼容。
# Build
cargo build --release
# Copy and edit configuration
cp taxii.example.toml taxii.toml
cp examples/data-config/full.yaml data-config.yaml # Or accounts.yaml for TAXII 2.x only
# Edit taxii.toml and data-config.yaml with your settings
# Run server (auto-runs migrations on startup)
./target/release/taxii-server
# Sync data configuration (services, collections, accounts)
./target/release/taxii-cli sync data-config.yaml
服务器启动于 http://localhost:9000。
Docker 镜像：cysecurity/darwis-taxii
cd examples/docker
# Create config directory and copy example configs
mkdir config
cp ../../taxii.example.toml config/taxii.toml
cp ../data-config/full.yaml config/data-config.yaml # Or accounts.yaml for TAXII 2.x only
# Edit config files as needed
# Start server and PostgreSQL
docker compose up -d
# Sync data configuration (services, collections, accounts)
docker compose exec taxii-server ./taxii-cli sync /app/config/data-config.yaml
# List accounts
docker compose exec taxii-server ./taxii-cli account list
如需在本地构建而不是从 Docker Hub 拉取镜像，请编辑 docker-compose.yml 并取消注释 build 部分。
DARWIS TAXII 使用两个配置文件（与 OpenTAXII 惯例一致）：
| 文件 | 用途 |
|---|---|
taxii.toml | 服务器设置：数据库、认证、域名、TAXII 1.x/2.x 选项 |
data-config/ | 数据：服务、集合、账户及权限 |
将 taxii.example.toml 复制为 taxii.toml，并根据你的环境进行编辑。
查看文档了解所有选项，包括环境变量覆盖。
# Sync services, collections, and accounts from YAML
taxii-cli sync data-config.yaml
# Account management
taxii-cli account list # List accounts with permissions
taxii-cli account delete -u user # Delete an account
# Database migrations (auto-run on server startup)
taxii-cli migrate run # Apply pending migrations
taxii-cli migrate status # Show migration status
# TAXII 2.x management
taxii-cli api-root add --title "My Root" --default
taxii-cli collection add --api-root-id <uuid> --title "Intel"
运行 taxii-cli --help 查看所有命令。
taxii.example.toml # Server configuration example
examples/
data-config/ # Data configuration examples
full.yaml # Full config (TAXII 1.x + accounts)
accounts.yaml # Accounts only (for TAXII 2.x)
docker/ # Docker deployment files
migrations/ # SQLx database migrations
taxii-core/ # Core types and signal hooks
taxii-db/ # Database persistence (SQLx)
taxii-auth/ # JWT and password authentication
taxii-1x/ # TAXII 1.x protocol (XML)
taxii-2x/ # TAXII 2.x protocol (JSON)
stix2/ # STIX 2.x parsing
taxii-server/ # HTTP server (Axum)
taxii-cli/ # CLI tool
https://cspf-founder.github.io/darwis-taxii/
BSD-3-Clause