Skip to main content
Version: Next

EDFN Installation Guide

The External Data Feeder for NFO (EDFN) is required for ingesting Cloud Flow Logs (AWS, Azure, GCP) or for security architectures where NFO is isolated from the internet.

Check for Bundled Version

If you installed NFO version 2.7 or higher, EDFN is already installed on your NFO host. You only need this guide if you require a standalone EDFN instance on a separate server.

System Requirements & Supported Platforms​

  • System: 4 CPU Cores, 8GB RAM.
  • Linux: Kernel 2.17+ on systemd-based distributions (Rocky Linux 8/9, RHEL 7/8/9, Ubuntu 20.04+, Debian 9+, Oracle Linux 7+).
  • Windows: Windows Server 2016, 2019, 2022.

Required Network Ports​

The following ports must be accessible for the system to function correctly:

80/TCP External Data Feeder for NFO Agents Internet communication 443/TCP External Data Feeder for NFO Agents secure Internet communication 8443/TCP NetFlow Optimizer communication

PortProtocolDescription
8443TCPEDFN - NetFlow Optimizer communication (HTTPS)
80TCPEDFN Agents Internet communication
443TCPEDFN Agents secure Internet communication

Installation Instructions​

Linux​

note

EDFN installation default directory is /opt/nfi-updater.

  1. Download the RPM or TAR package.
  2. Install (RPM):
rpm -ihv nfi-updater-<version>.x86_64.rpm

  1. Install (TAR):
tar zxvf nfi-updater-<version>.tar.gz
./setup.sh -i

  1. Start Service: systemctl start nfi_updd

Windows​

  1. Download and launch the .exe.zip installer.
  2. Unzip the installer.
  3. Follow the setup wizard.
  4. Verify: Open services.msc and ensure External Data Feeder for NFO is "Running."

Post Installation Steps​

note

If External Data Feeder for NFO is installed on a separate server, or if you have several EDFNs connected to one NFO, perform the following:

  1. Stop EDFN service

    • for Linux OSes which support systemd use command systemctl stop nfi_updd
    • for Linux OSes which support OpenRC use command rc-service nfi_updd stop
    • for other Linux OSes use command service nfi_updd stop
    • for Windows OSes use Microsoft Management Console snap-in "Services"

  2. Change uri parameter in updater.properties file located in /opt/nfi-updater/conf (In Windows C:\Program Files\NetFlow Logic\NetFlow Integrator Updater\conf) to IP address or DNS name of NetFlow Optimizer

    uri = https://<nfo-host>:8443

  3. If this is your second EDFN instance, set a unique EDFN identifier in uid

    uid = EDFN2

  4. Copy Java KeyStore and TrustStore from EDFN installed with NFO ($EDFN1_HOME) to EDFN installed on a separate machine ($EDFN2_HOME)

FromTo
$EDFN1_HOME/conf/.updater_keystore$EDFN2_HOME/conf/.updater_keystore
$EDFN1_HOME/conf/.updater_truststore$EDFN2_HOME/conf/.updater_truststore

  1. Start EDFN service

    • for Linux OSes which support systemd use command systemctl start nfi_updd
    • for Linux OSes which support OpenRC use command rc-service nfi_updd start
    • for other Linux OSes use command service nfi_updd start
    • for Windows OSes use Microsoft Management Console snap-in "Services"