Skip to content

建议:实现gRPC流式API支持分布式扫描 #210

Description

@hmkklol

你好 @zan8in

对于大规模外部攻击面管理(ASM),单节点afrog可能无法覆盖全部资产。建议支持分布式扫描。

建议:增加afrog-agent模式

架构:

  1. 中央控制器(Controller)

    • 维护任务队列
    • 聚合结果
    • 提供Web界面查看进度
  2. 扫描代理(Agent)

    afrog agent --controller grpc://controller.example.com:50051
    • 通过gRPC双向流接收ScanJob
    • 本地执行扫描
    • 实时回传VulnResult
  3. 通信协议(Protobuf)

    message ScanJob {
      string target = 1;
      repeated string pocs = 2;
      int32 priority = 3;
    }
    
    message VulnResult {
      string target = 1;
      string poc_id = 2;
      bool confirmed = 3;
      string proof = 4;
    }

扩展能力:

  • 支持1000+ agent同时工作
  • 自动任务分片(按目标/按PoC)
  • 断点续扫
  • 结果去重

这是afrog从单机工具向企业级平台进化的关键。

[English Translation / 英文摘要]

Hi maintainers, this issue is a feature / architecture / security suggestion for 14_afrog.
The Chinese text above contains the detailed proposal with technical context and implementation ideas.
In summary: we are requesting the enhancement described above and would be happy to provide PRs or further discussion in either Chinese or English.
Thank you for the excellent work on this project!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions