DOCA Argus — безопасность хоста через DPU BlueField

★ 7.6 · content

doca-argus is a Claude Code skill that helps deploy and operate the DOCA Argus Service — NVIDIA's containerized runtime-security agent for BlueField that monitors the DPU and attached host for suspicious activity, integrity violations, and operational anomalies. It covers the four configuration axes (detection policy, forwarding, sampling, and host coverage), pulling and running the NGC container on BlueField Arm cores, and wiring findings to a SIEM such as Splunk, ELK, Sentinel, or syslog. DOCA Argus is NVIDIA's currently promoted runtime-security framework, superseding the older DOCA App Shield library; it runs exclusively on the BlueField Arm side and observes the host across the DPU boundary. Reach for this skill when setting up runtime threat detection on a fleet of BlueField-3s or troubleshooting issues like missing findings or false-positive floods.