original files of m241

2026-07-30 11:19:44 +05:30
parent 170c2b3f3a
commit afc7070c1f
12254 changed files with 7655111 additions and 0 deletions
@@ -0,0 +1,178 @@
+/* 01ipsec.cdf - IPsec configuration file */
+
+/*
+ * Copyright (c) 2006 Wind River Systems, Inc.
+ *
+ * The right to copy, distribute or otherwise make use of this software
+ * may be licensed only pursuant to the terms of an applicable Wind River
+ * license agreement. No license to Wind River intellectual property rights
+ * is granted herein. All rights not licensed by Wind River are reserved
+ * by Wind River.
+ */
+
+/*
+modification history
+--------------------
+
+*/
+
+#ifdef _WRS_CONFIG_COMPONENT_IPIPSEC
+Folder FOLDER_IPSEC {
+         NAME           IPSec Components
+         CHILDREN       INCLUDE_IP_SECURITY \
+         CHILDREN       INCLUDE_IPSECCTRL_CMD \
+         CHILDREN       INCLUDE_KEYADM_CMD
+        _CHILDREN       FOLDER_NET_L3_NETWORK
+}
+
+Component INCLUDE_IP_SECURITY
+        {
+        NAME            IP Security (IPsec)
+        SYNOPSIS        Provide authentication and encryption of ip datagrams
+        CONFIGLETTES    ipipsec_config.c
+        CFG_PARAMS      IPIPSEC_LARVAL_SA_TMO_SECONDS \
+                        IPIPSEC_MAX_TFC_PADDING \
+                        IPIPSEC_MAX_TFC_DELAY \
+                        IPIPSEC_MIN_TFC_DELAY \
+                        IPIPSEC_MAX_DUMMY_SIZE \
+                        IPIPSEC_CONF_ENABLE_OUTFILTER \
+                        IPIPSEC_CONF_ESP_ENABLE \
+                        IPIPSEC_CONF_AH_ENABLE \
+                        IPIPSEC_CONF_IPIP_ALLOW \
+			IPIPSEC_CONF_SA_CACHE_MAXSIZE \
+			IPIPSEC_CONF_FLOW_CACHE_MAXSIZE
+        MODULES         ipipsec.o
+        }
+
+Parameter IPIPSEC_LARVAL_SA_TMO_SECONDS
+        {
+        NAME        Larval SA timeout
+        SYNOPSIS    Default larval SA (created by getspi) timeout in seconds.
+        TYPE        char *
+        DEFAULT     "600"
+        }
+
+Parameter IPIPSEC_MAX_TFC_PADDING
+        {
+        NAME        TFC padding
+        SYNOPSIS    Maximum TFC padding in bytes
+        TYPE        int
+        DEFAULT     255
+        }
+
+Parameter IPIPSEC_MAX_TFC_DELAY
+        {
+        NAME        TFC dummy packet generation max delay
+        SYNOPSIS    Maximum delay in seconds
+        TYPE        int
+        DEFAULT     10
+        }
+
+Parameter IPIPSEC_MIN_TFC_DELAY
+        {
+        NAME        TFC dummy packet generation min delay
+        SYNOPSIS    Minimum delay in seconds
+        TYPE        int
+        DEFAULT     5
+        }
+
+Parameter IPIPSEC_MAX_DUMMY_SIZE
+        {
+        NAME        TFC dummy packet max size
+        SYNOPSIS    Maximum dummy packet size in bytes
+        TYPE        int
+        DEFAULT     500
+        }
+
+Parameter IPIPSEC_CONF_ENABLE_OUTFILTER
+        {
+        NAME                    Output filter
+        SYNOPSIS                Enable output filter
+        TYPE                    int
+        DEFAULT                 0
+        }
+
+Parameter IPIPSEC_CONF_ESP_ENABLE
+        {
+        NAME                    Enable ESP
+        SYNOPSIS                Enable ESP
+        TYPE                    int
+        DEFAULT                 1
+        }
+
+Parameter IPIPSEC_CONF_AH_ENABLE
+        {
+        NAME                    Enable AH
+        SYNOPSIS                Enable AH
+        TYPE                    int
+        DEFAULT                 1
+        }
+
+Parameter IPIPSEC_CONF_IPIP_ALLOW
+        {
+        NAME                    Allow IPIP tunneling
+        SYNOPSIS                WARNING, IPIP IS A SECURITY RISK! See programmer's guide.
+        TYPE                    int
+        DEFAULT                 1
+        }
+
+Parameter IPIPSEC_CONF_SA_CACHE_MAXSIZE
+        {
+        NAME                    Configure maximum SA cachesize
+        SYNOPSIS                Configure maximum SA cachesize
+        TYPE                    int
+        DEFAULT                 16
+        }
+
+Parameter IPIPSEC_CONF_FLOW_CACHE_MAXSIZE
+        {
+        NAME                    Configure maximum flow cachesize
+        SYNOPSIS                Configure maximum flow cachesize
+        TYPE                    int
+        DEFAULT                 16
+        }
+
+#if defined(_WRS_VX_SMP) || defined(_WRS_CONFIG_SMP)
+Component INCLUDE_IP_SECURITY_SMP {
+    NAME            IP Security for symmetric multiprocessing (SMP)
+    SYNOPSIS        Provides multi-core IPsec for symmetric multiprocessing.
+    _CHILDREN       FOLDER_NET_L3_NETWORK
+    CONFIGLETTES    ipcom_config.c ipipsec_config.c
+    CFG_PARAMS      IPIPSEC_SMP_NUM_CPUS
+    INIT_RTN        ipcom_configure_reserved_cpus (IPIPSEC_SMP_NUM_CPUS);
+    _INIT_ORDER     usrInit
+    INIT_AFTER      INCLUDE_BASE_KERNEL
+    INIT_BEFORE     INCLUDE_KERNEL
+    MODULES         ipipsec.o
+    REQUIRES        INCLUDE_IP_SECURITY
+    INCLUDE_WHEN    INCLUDE_IP_SECURITY
+}
+
+Parameter IPIPSEC_SMP_NUM_CPUS
+        {
+        NAME                    Number of CPUs reserved for IPsec in SMP
+        SYNOPSIS                Number of CPUs reserved for IPsec in SMP. Must be between 1 \
+                    and VX_SMP_NUM_CPUS-1. The reserved CPUs are unavailable for \
+                    other VxWorks tasks.
+        TYPE                    int
+        DEFAULT                 1
+        }
+#endif
+
+
+/* This is a hidden component */
+Component INCLUDE_IPSECCTRL_CMD {
+    NAME        ipsecctrl
+    SYNOPSIS    ipsecctrl command
+    MODULES     ipipsec_cmd_ipsecctrl.o
+    REQUIRES    INCLUDE_IPCOM_SHELL_CMD INCLUDE_IP_SECURITY
+}
+
+/* This is a hidden component */
+Component INCLUDE_KEYADM_CMD {
+    NAME        keyadm
+    SYNOPSIS    keyadm command
+    MODULES     ipipsec_cmd_keyadm.o
+    REQUIRES    INCLUDE_IPCOM_SHELL_CMD INCLUDE_IP_SECURITY
+}
+#endif