I am using OpenVAS 8, no idea what changed in 9 on this front, and no.. there is no way. What I currently do is the following:
* Master instance which does not run any scans itself, just start on the slave and collect all the information and run the web interface * 2 slaves (1 with public interface and one within a management network) * All jobs are specifically assigned to the slave in the correct network manually when creating the task * I run a bash scheduler script on the Master to start tasks based on the configured slave for the task and how many tasks are running on that slave; limiting my slaves to two tasks at a time. This process simply loops every 5 minutes on week days between 08:00 and 16:00 hours to avoid scans during the weekend and night. My goals is to scan everything at least once a month (my scheduler script checks if it has run this month or not...). This works just fine to finish all the scans within two weeks. (211 tasks in total consisting out of tasks with a single machine, multiple machines and entire subnets) When it is going to take too long I will have to manually add another scan slave and assign some of the current tasks and new tasks to that node... no other way around it. Sometimes when a scan is not causing much load (such as subnet scans which take a long time but the subnet is quite empty) I manually start a one or a few other scans. *When you create a task, before you actually start it, edit it and set "Alterable Task" to yes or you won't be able to change the slave scanner afterwards. If you want I can send you a copy of my scheduler script; it's not yet the nicest script in the world though and written specifically for my setup. Thijs Stuurman Security Operations Center | KPN Internedservices [email protected]<mailto:[email protected]> | [email protected]<mailto:[email protected]> T: +31(0)299476185 | M: +31(0)624366778 PGP Key-ID: 0x16ADC048 (https://pgp.surfnet.nl/) Fingerprint: 2EDB 9B42 D6E8 7D4B 6E02 8BE5 6D46 8007 16AD C048 W: https://www.internedservices.nl<https://www.internedservices.nl/> | L: http://nl.linkedin.com/in/thijsstuurman Van: Openvas-discuss [mailto:[email protected]] Namens Niklas Klein Verzonden: maandag 10 april 2017 16:15 Aan: [email protected] Onderwerp: [Openvas-discuss] Using slaves Hello, I am looking into using slaves to even out the stress on my single openvas-server. I already installed an additional openvas-instance and added it as a slave in my masters webinterface. But it seems like there is no automated loadbalancing and I have to assign tasks, which should be processed by the slave, manually. Is that right? Is there no way to automatize some kind of loadbalancing? I would also be glad if someone had a best practice document about using slaves in particular. Thanks in advance, Niklas
_______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
