/* 00comp_iplite_protos.cdf - IPLite Protocols Component configuration file */ /* * Copyright (c) 2006-2007 Wind River Systems, Inc. * * The right to copy, distribute or otherwise make use of this software * may be licensed only pursuant to the terms of an applicable Wind River * license agreement. No license to Wind River intellectual property rights * is granted herein. All rights not licensed by Wind River are reserved * by Wind River. */ /* modification history -------------------- 01b,01mar13,xhs Fix WIND00405569, adding some missed parameters. 01a,31aug10,xhs created */ #ifdef _WRS_CONFIG_COMPONENT_IPLITE Component INCLUDE_IPLITE { NAME IPLITE SYNOPSIS IPLITE REQUIRES INCLUDE_IPCOM MODULES iplite.o CONFIGLETTES iplite_config.c } Component INCLUDE_IPAIP { NAME IPv4 AutoIP SYNOPSIS Auto IPv4 Address configuration. This requires the IPLite \ stack to be compiled with the IPLITE_USE_RFC3927 directive. REQUIRES INCLUDE_IPLITE INCLUDE_IPCOM_USE_ETHERNET CFG_PARAMS INET_IPAIP_IFNAME_LIST } Selection SELECT_IPAIP_CONFIG { NAME IPv4 AutoIP configurations SYNOPSIS IPv4 AutoIP configurations COUNT 1- CHILDREN INCLUDE_IPAIP_GLOBAL_CONFIGS DEFAULTS INCLUDE_IPAIP_GLOBAL_CONFIGS } Component INCLUDE_IPAIP_GLOBAL_CONFIGS { NAME Global configurations SYNOPSIS Global IPv4 AutoIP configurations REQUIRES INCLUDE_IPAIP CFG_PARAMS INET_IPAIP_PROBE_WAIT INET_IPAIP_PROBE_NUM \ INET_IPAIP_PROBE_MIN INET_IPAIP_PROBE_MAX \ INET_IPAIP_ANNOUNCE_WAIT INET_IPAIP_ANNOUNCE_NUM \ INET_IPAIP_ANNOUNCE_INTERVAL \ INET_IPAIP_MAX_CONFLICTS \ INET_IPAIP_RATE_LIMIT_INTERVAL \ INET_IPAIP_DEFEND_INTERVAL } /******************** Configuration Parameters *****************************/ /* INCLUDE_IPAIP configuration parameters */ Parameter INET_IPAIP_IFNAME_LIST { NAME autoIP interface list SYNOPSIS A space-separated list of interfaces that can configure \ a link-local IPv4, e.g. "eth0 eth1". TYPE char * DEFAULT "" } /* INCLUDE_IPAIP_GLOBAL_CONFIGS configuration parameters */ /* * The following configuration parameters support RFC3927, Dynamic * Configuration of IPv4 Link-Local Addresses. These configuration * parameters are only meaningful if IPLITE is compiled with the * IPLITE_USE_RFC3927 directive. */ Parameter INET_IPAIP_PROBE_WAIT { NAME autoIP probe wait time SYNOPSIS Time (in seconds) the host will wait before creating a link \ local IPv4 and start checking it for uniqueness. TYPE char * DEFAULT "1" } Parameter INET_IPAIP_PROBE_NUM { NAME autoIP probe count SYNOPSIS Number of times a link local address is checked for uniqness \ before being assigned TYPE char * DEFAULT "3" } Parameter INET_IPAIP_PROBE_MIN { NAME autoIP min probe time SYNOPSIS The minimum time (in seconds) where the next probe is sent. TYPE char * DEFAULT "1" } Parameter INET_IPAIP_PROBE_MAX { NAME autoIP max probe time SYNOPSIS The maximum time (in seconds) where the next probe is sent. TYPE char * DEFAULT "3" } Parameter INET_IPAIP_ANNOUNCE_WAIT { NAME autoIP announce wait time SYNOPSIS The time to wait (in seconds) before the assigned IPv4 \ address is announced. TYPE char * DEFAULT "2" } Parameter INET_IPAIP_ANNOUNCE_NUM { NAME autoIP number of announcements SYNOPSIS The number of announcements to send TYPE char * DEFAULT "2" } Parameter INET_IPAIP_ANNOUNCE_INTERVAL { NAME autoIP announcements interval SYNOPSIS The number of seconds between announcements TYPE char * DEFAULT "2" } Parameter INET_IPAIP_MAX_CONFLICTS { NAME autoIP max conflicts SYNOPSIS Max conflicts before rate limiting TYPE char * DEFAULT "10" } Parameter INET_IPAIP_RATE_LIMIT_INTERVAL { NAME autoIP rate limit interval SYNOPSIS Delay between consecutive attempts TYPE char * DEFAULT "60" } Parameter INET_IPAIP_DEFEND_INTERVAL { NAME autoIP defensive interval SYNOPSIS minimum interval between defensive ARPs TYPE char * DEFAULT "10" } Component INCLUDE_IPTCP { NAME TCP SYNOPSIS Transmission Control Protocol REQUIRES INCLUDE_IPCOM INCLUDE_IPLITE MODULES iplite_tcp.o CFG_PARAMS TCP_CONN_TIMEOUT TCP_MAX_RETRANSMITS TCP_MSL \ IPTCP_MAX_RETRAMSMITS_IN_TRANSIENT \ IPTCP_MAX_TRANSIENT IPTCP_TRANSIENT_THRESH \ TCP_MAX_MSS TCP_USE_TIMESTAMP \ TCP_USE_RFC1122_URGENT_DATA \ TCP_LAND_ATTACK_PROTECTION \ TCP_ALLOW_ZERO_WINDOW \ TCP_ALLOW_TINY_WINDOW \ TCP_KEEP_IDLE \ TCP_KEEP_INTVL \ TCP_KEEP_CNT } /* INCLUDE_IPTCP configuration parameters */ Parameter TCP_CONN_TIMEOUT { NAME Connection timeout SYNOPSIS Define the number of seconds IPNET will try to create a TCP \ connection before giving up. TYPE int DEFAULT 75 } Parameter TCP_MAX_RETRANSMITS { NAME Max retransmits SYNOPSIS Maximum number of times a TCP segment will be resent before \ giving up with an IPTCP_ERRNO_ETIMEDOUT error. Exponential \ back off is applied before each resend (max time between \ two resends is 1 minute). TYPE int DEFAULT 10 } Parameter IPTCP_MAX_RETRAMSMITS_IN_TRANSIENT { NAME Max retransmits transient states SYNOPSIS Defines the maximum number of resend attempts to use when \ the number of sessions in the transient state exceeds the \ transient threshold set with iptcp.TransientTresh. TYPE int DEFAULT 2 } Parameter IPTCP_MAX_TRANSIENT { NAME Max transient SYNOPSIS Defines the maximum number of sessions that can be in a \ transient state. Once the value is reached, the session with \ the longest transient state period is dropped and the session \ is set to the CLOSED state. The session is then removed from \ the list of sessions in a transient state. TYPE int DEFAULT 20 } Parameter IPTCP_TRANSIENT_THRESH { NAME Transient tresh SYNOPSIS This threshold refers to the number of sessions in a transient \ state. When this threshold is exceeded, the number of resend \ attempts is reduced to a value set by \ iptcp.MaxRetransmitsTransientStates. TYPE int DEFAULT 5 } Parameter TCP_MSL { NAME Maximum segment lifetime SYNOPSIS TCP sockets that enter the TIME_WAIT state will be in that \ state for 2 times this value. Should be 120 sec (2 min) \ according to RFC 793, but most TCP/IP stacks sets this \ value to 30 seconds. TYPE int DEFAULT 30 } Parameter TCP_MAX_MSS { NAME Maximum segment size SYNOPSIS Defines the largest Maximum Segment Size that TCP will \ ever suggest. The actual MSS suggested might be smaller \ than this number if depending on MTU for the interface. \ Set to 0 if the largest MSS allowed by the MTU should be used. TYPE int DEFAULT 0 } Parameter TCP_USE_TIMESTAMP { NAME Use Timestamp SYNOPSIS Determines if the Timestamp option should be included \ in all segments for peers that support it. Set to 0 if the \ Timestamp option should never be used. TYPE int DEFAULT 0 } Parameter TCP_USE_RFC1122_URGENT_DATA { NAME Use RFC1122 urgent data SYNOPSIS Set to "1" to use urgent data as described in RFC 1122. \ Set to "0" to use urgent data as described in RFC 793. \ Should be set to 0 since that is how most stacks works, \ must be set to 1 in order successfully pass Ixia ANVL \ TCP-CORE group 19 tests. TYPE int DEFAULT 0 } Parameter TCP_LAND_ATTACK_PROTECTION { NAME Enable/disable LAND attack protection on TCP SYNOPSIS Set to 1 to prevent LAND attacks on TCP implementation. TYPE int DEFAULT 1 } Parameter TCP_ALLOW_ZERO_WINDOW { NAME Allow zero window SYNOPSIS Enable/disable acceptance of the peer window being set \ to zero in the ACK of the SYN/ACK. An attacker can use \ zero window to keep the node in persist time for a long \ time. TYPE int DEFAULT 0 } Parameter TCP_ALLOW_TINY_WINDOW { NAME Allow tiny window SYNOPSIS Enable/disable acceptance of the peer window being set \ to a value less that one MSS in the ACK of the SYN/ACK. \ An attacker can use zero window to keep the node in \ persist time for a long. Enabling can sometimes cause \ cause connection trouble in environments that contains \ traffic shapers which modifies the peer windows of TCP \ segments. This is why this is allowed by default. TYPE int DEFAULT 1 } Parameter TCP_KEEP_IDLE { NAME Keep alive idle time SYNOPSIS The default time a TCP connection must be idle \ before the first keep-alive packet is sent (in seconds). TYPE int DEFAULT 7200 } Parameter TCP_KEEP_INTVL { NAME Keep alive interval SYNOPSIS The time between each keep-alive probe. TYPE int DEFAULT 75 } Parameter TCP_KEEP_CNT { NAME Number of keep alive packets SYNOPSIS Number of unsuccessful keep-alive probes \ that will be sent before dropping the connection. TYPE int DEFAULT 10 } #endif