Source

Integrate PF with Quix

Process PF data with Quix

Quix allows you to consume and process data from PF via the Quix Telegraf plugin, enabling anyone to build, deploy and scale advanced data processing systems with minimal low level knowledge

100% Python

No JVM, wrappers, DSL, or cross-language debugging. Quix provides a Python Streaming DataFrame API that treats data streams as continuously updating tables.

Rich stream processing features

Quix supports stateless and stateful operations, aggregations over hopping and tumbling windows, custom data processing functions, and exactly-once semantics.

Dependable at scale

Quix is scalable, highly available, and fault tolerant. It's optimized to process high-volume, high-velocity data streams with consistently low latencies.

How to consume PF data with Quix

The PF Telegraf plugin collects metrics from BSD packet filter, monitoring firewall states, rule evaluations, and packet processing statistics for BSD-based network security analysis

Quix is the Python stream processor, and it serves the following purposes:

  • Ingest messages from PF
  • Process received messages
  • Send transformed data to destination systems (via Quix integrations) so it can be operationalized
  • Use data received from PF to power real-time capabilities

Integration with PF is achieved via Telegraf using the Quix Telegraf output plugin. This plugin allows Telegraf to collect data from PF and forward it to Quix for real-time processing, analysis, and integration with downstream systems.