/* 00comp_ipnet_protos.cdf - IPNet Protocols Component configuration file */

/*
 * Copyright (c) 2006-2008, 2010-2015 Wind River Systems, Inc.
 *
 * The right to copy, distribute or otherwise make use of this software
 * may be licensed only pursuant to the terms of an applicable Wind River
 * license agreement. No license to Wind River intellectual property rights
 * is granted herein. All rights not licensed by Wind River are reserved
 * by Wind River.
 */

/*
modification history
--------------------
02n,28dec15,h_x  Port feature US71092 for 6.9
02m,11mar15,wfl  Add parameter IPNET_DST_CACHE_LIMIT for INCLUDE_IPNET (VXW6-83994).
02l,08feb15,ljl  Add parameter TCP_USE_RFC6528_SECURE_ISN for INCLUDE_IPTCP (VXW6-84130).
02k,10jul14,h_x  Fix VXW6-82894
02j,25may12,ggz  Deleted param IPNET_ROUTE_MAX_CLONE_COUNT. Defect WIND00340576.
02i,19apr12,fei  Added for TCPAO(RFC5925).
02h,01mar13,xhs  Fix WIND00405569, adding some missed parameters.
02g,24aug11,h_s  Added the support for tcp keep alive parameters.
02f,25jan11,dlk  Changing default IPNET_ROUTE_MAX_CLONE_COUNT to 50000.
02e,20jan11,dlk  Adding IPNET_ROUTE_MAX_CLONE_COUNT parameter.
02d,14oct10,xhs  for iplite
02c,02oct08,jre  Added INET_DELETE_ADDR_ON_DUPLICATE_DETECT
02b,23sep08,rme  Misspelled words corrected
02a,19sep07,rme  Added missing backslashes
01z,07sep07,rme  Replaced SELECTION_IPCOM_FS with SELECT_IPCOM_FS in INCLUDE_IPNET_USE_NAT
01y,13jul07,dlk  Make existing INET6_RTHDR0 a parameter of INCLUDE_IPCOM_USE_INET6.
01x,25apr07,tkf  Add INCLUDE_IPCOM_USE_INET6_ONLY component to support
                 Pv6-Only Build.
01m,06mar07,kch  Changed IPNAT_ICMP_MAPPING_TIMEOUT default value from 5 to
                 10 seconds (WIND00089895).
01l,07feb07,tkf  Add INCLUDE_IPNET_USE_NAT dependency on
                 SELECTION_IPCOM_FS.
01k,03jan07,kch  Updated default value for IPNET_CACHE_BUFSIZE,
                 INET6_MAX_MULTICAST_SOLICIT and TCP_USE_TIMESTAMP. Also
                 removed duplicate ipnet_config.c configlette property from
                 INCLUDE_IPCOM_USE_INET, INCLUDE_IPCOM_USE_INET6 and
                 INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT.
01j,20dec06,kch   Changed INET_MAX_MULTICAST_SOLICIT default value from 0 to 9.
01i,01dec06,kch  Changed INET_MIN_MTU_SIZE default value to 68. Also added
                 additional configuration parameters for tcp.
01h,23sep06,kch  Moved multicast routing and proxy components to
                 02comp_ipnet_mcast.cdf. Also moved INCLUDE_IPNET_USE_VRRPD to
                 02comp_ipnet_vrrp.cdf and INCLUDE_IPRADIUS to
                 02comp_ipnet_radius.cdf.
01g,20sep06,tkf  Add INCLUDE_IPV4 and INCLUDE_IPV6 for backwards compatibility.
01f,07sep06,kch  Removed ipnet_nat_proxy_dns symbol from INCLUDE_IPNET_USE_NAT.
01e,23aug06,kch  Updated default values for INET_BASE_REACHABLE_TIME and
                 INET_MAX_MULTICAST_SOLICIT. Also added support for
                 autoconf privacy extensions and NAT configurations. Moved
                 proxyArp configuration parameters to INCLUDE_IPPROXYARP.
01d,12aug06,kch  Added INCLUDE_IPNET_USE_VRRPD.
01c,02jul06,kch  Corrected dependency problems for INCLUDE_IPMCP_USE_IGMP,
                 INCLUDE_IPMCP_USE_MLD and INCLUDE_IPMCP components.
01b,26jun06,dlk  Remove ipnet_radvd.o as a module of INCLUDE_IPCOM_USE_INET6;
                 it belongs to INCLUDE_IPRADVD.
01a,22may06,kch  created.
*/

Component INCLUDE_IPNET {
    NAME            IPNET
    SYNOPSIS        IPNET
    REQUIRES        INCLUDE_IPCOM
    MODULES         ipnet.o
    CONFIGLETTES    ipnet_config.c
    CFG_PARAMS      IPNET_MAX_INPUT_PKTS \
                    IPNET_REASSEMBLY_TIMEOUT \
                    IPNET_CACHE_BUFSIZE \
                    IPNET_MEMORY_LIMIT \
                    IPNET_DST_CACHE_LIMIT \
                    IPNET_MAX_REASSEMBLY_LIST_LEN \
                    IPNET_MAX_DGRAM_FRAG_LIST_LEN \
                    IPNET_SLAB_DESC_0 \
                    IPNET_SLAB_DESC_1 \
                    IPNET_SLAB_DESC_2 \
                    IPNET_SLAB_DESC_3 \
                    IPNET_SLAB_DESC_4 \
                    IPNET_SLAB_DESC_5
}

Component INCLUDE_IPCOM_USE_INET {
    NAME            IPv4
    SYNOPSIS        IPNet IPv4 support
#ifdef _WRS_CONFIG_COMPONENT_IPLITE
    MODULES         iplite_ip4.o
    LINK_SYMS       iplite_ip4_input
    REQUIRES        INCLUDE_IPLITE
#else
    MODULES         ipnet_ip4.o
    LINK_SYMS       ipnet_ip4_input
    REQUIRES        INCLUDE_IPNET
#endif
    CFG_PARAMS      INET_MIN_MTU_SIZE INET_BASE_HOP_LIMIT \
                    INET_SEND_GRATUITOUS_ARP \
                    INET_DELETE_ADDR_ON_DUPLICATE_DETECT \
                    INET_MAX_PKTS_PENDING INET_MAX_UNICAST_SOLICIT \
                    INET_MAX_MULTICAST_SOLICIT INET_MAX_APP_SOLICIT \
                    INET_BASE_REACHABLE_TIME INET_BASE_RETRANSMIT_TIME \
                    INET_DELAY_FIRST_PROBE_TIME INET_NBR_CACHE_TO_LIVE_TIME \
                    INET_DST_CACHE_TO_LIVE_TIME \
                    INET_NBR_MIN_RANDOM_FACTOR INET_NBR_MAX_RANDOM_FACTOR \
                    INET_DISABLE_BROADCAST_FWD \
                    INET_ICMP_RATE_LIMIT_BUCKET_SIZE \
                    INET_ICMP_RATE_LIMIT_INTERVAL INET_ICMP_REDIRECT_SEND \
                    INET_ICMP_REDIRECT_RECEIVE INET_ICMP_IGNORE_ECHO_REQ \
                    INET_ICMP_IGNORE_TIMESTAMP_REQ \
                    INET_ICMP_SEND_TIME_EXCEEDED \
                    INET_ICMP_SEND_DST_UNREACHABLE \
                    INET_ICMP_IGNORE_BROADCAST \
                    INET_UDP_CHECKSUM \
                    INET_RANDOM_IP_ID
}

Component INCLUDE_IPV4 {
    NAME            IPv4
    SYNOPSIS        IPNet IPv4 support
    INCLUDE_WHEN    INCLUDE_IPCOM_USE_INET
}

Component INCLUDE_IPCOM_USE_INET6 {
    NAME            IPv6
    SYNOPSIS        IPv6
#ifdef _WRS_CONFIG_COMPONENT_IPLITE
    LINK_SYMS       iplite_ip6_input
    REQUIRES        INCLUDE_IPLITE
#else
    LINK_SYMS       ipnet_ip6_input
    REQUIRES        INCLUDE_IPNET
#endif
    CFG_PARAMS      INET6_MIN_MTU_SIZE INET6_BASE_HOP_LIMIT \
                    INET6_MAX_PKTS_PENDING INET6_MAX_UNICAST_SOLICIT \
                    INET6_MAX_MULTICAST_SOLICIT INET6_MAX_APP_SOLICIT \
                    INET6_DAD_TRANSMITS INET6_BASE_REACHABLE_TIME \
                    INET6_BASE_RETRANSMIT_TIME INET6_DELAY_FIRST_PROBE_TIME \
                    INET6_NBR_CACHE_TO_LIVE_TIME INET6_DST_CACHE_TO_LIVE_TIME \
                    INET6_ROUTER_LIFETIME INET6_ICMP_RATE_LIMIT_BUCKET_SIZE \
                    INET6_ICMP_RATE_LIMIT_INTERVAL INET6_ICMP_REDIRECT_SEND \
                    INET6_ICMP_REDIRECT_RECEIVE INET6_ICMP_IGNORE_ECHO_REQ \
                    INET6_ICMP_SEND_TIME_EXCEEDED \
                    INET6_ICMP_SEND_DST_UNREACHABLE INET6_ACCEPT_RTADV \
                    INET6_AUTO_CONFIG INET6_ADD_AUTONOMOUS_ADDR \
                    INET6_RTHDR0
}

Component INCLUDE_IPCOM_USE_INET6_ONLY {
    NAME        IPv6 Only
    SYNOPSIS    IPv6 only stack support. This component excludes IPv4 stack support.
    REQUIRES    INCLUDE_IPCOM_USE_INET6 INCLUDE_IPNET
    EXCLUDES    INCLUDE_IPCOM_USE_INET
}

Component INCLUDE_IPV6 {
    NAME            IPv6
    SYNOPSIS        IPNet IPv6 support
    INCLUDE_WHEN    INCLUDE_IPCOM_USE_INET6
}

Component INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT {
    NAME            autoconf privacy extensions
    SYNOPSIS        IPv6 autoconf privacy extensions support for RFC3401, \
                    Privacy Extensions for Stateless Address Auto \
                    configuration in IPv6. This requires the IPNet stack to \
                    be compiled with IPNET_USE_RFC3041 directive.
    REQUIRES        INCLUDE_IPCOM_USE_INET6 \
                    SELECT_IPNET6_AUTOCONF_PRIVACY_CONFIG
}

Selection SELECT_IPNET6_AUTOCONF_PRIVACY_CONFIG {
    NAME            autoconf privacy configurations
    SYNOPSIS        IPv6 autoconf privacy extensions configurations
    COUNT           1-
    CHILDREN        INCLUDE_IPNET6_PRIVACY_GLOBAL_CONFIGS \
                    INCLUDE_IPNET6_PRIVACY_INTERFACE_CONFIGS
}

Component INCLUDE_IPNET6_PRIVACY_GLOBAL_CONFIGS {
    NAME            global configurations
    SYNOPSIS        IPv6 autoconf privacy extensions global configurations
    REQUIRES        INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT
    CFG_PARAMS      INET6_ENABLE_PRIVACY_EXTENSONS INET6_TEMP_VALID_LIFETIME \
                    INET6_TEMP_PREFERRED_LIFETIME INET6_REGEN_ADVANCE
}

Component INCLUDE_IPNET6_PRIVACY_INTERFACE_CONFIGS {
    NAME            Per-interface configurations
    SYNOPSIS        Per-interface IPv6 autoconf privacy configurations
    REQUIRES        INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT
    CFG_PARAMS      INET6_IFLIST_ENABLE_PRIVACY_EXTENSONS \
                    INET6_IFLIST_TEMP_VALID_LIFETIME \
                    INET6_IFLIST_TEMP_PREFERRED_LIFETIME \
                    INET6_IFLIST_REGEN_ADVANCE
}

Component INCLUDE_IPNET_USE_NAT {
    NAME            NAT
    SYNOPSIS        NAT
    LINK_SYMS       ipnet_nat_output_hook
    REQUIRES        INCLUDE_IPCOM_USE_INET
    CFG_PARAMS      IPNAT_ICMP_MAPPING_TIMEOUT IPNAT_UDP_MAPPING_TIMEOUT \
                    IPNAT_TCP_MAPPING_TIMEOUT IPNAT_OTHER_MAPPING_TIMEOUT \
                    IPNAT_MAX_MAPPING IPNAT_AUTOPORT_START_INTERVAL \
                    IPNAT_AUTOPORT_END_INTERVAL
}

#ifndef _WRS_CONFIG_COMPONENT_IPLITE
Component INCLUDE_IPTCP {
    NAME            TCP
    SYNOPSIS        Transmission Control Protocol
    REQUIRES        INCLUDE_IPCOM INCLUDE_IPNET
    MODULES         iptcp.o
    CONFIGLETTES    iptcp_config.c
    CFG_PARAMS      TCP_CONN_TIMEOUT TCP_MAX_RETRANSMITS TCP_MSL TCP_DELAY_ACK_TIME \
                    IPTCP_MAX_RETRAMSMITS_IN_TRANSIENT TCP_IMMEDIATE_ACK_FOR_PSH \
                    IPTCP_MAX_TRANSIENT IPTCP_TRANSIENT_THRESH \
                    TCP_MAX_MSS TCP_USE_TIMESTAMP  \
                    TCP_USE_RFC1122_URGENT_DATA \
                    TCP_SEGMENT_MULTIPLIER \
                    TCP_LAND_ATTACK_PROTECTION \
                    TCP_ALLOW_ZERO_WINDOW \
                    TCP_ALLOW_TINY_WINDOW \
                    TCP_PERSIST_TMO \
                    TCP_CLAMP_MSS \
                    TCP_DEFAULT_BACKLOG_SIZE \
                    TCP_KEEP_IDLE \
                    TCP_KEEP_INTVL \
                    TCP_KEEP_CNT \
                    TCP_USE_RFC6528_SECURE_ISN TCP_WUPW
}
#endif

Component INCLUDE_IPTCPAO_CMD {
    NAME        IPTCP tcpao commands
    SYNOPSIS    IPTCP Authentication Option commands.
    MODULES     iptcp_cmd_ao.o
    LINK_SYMS   iptcp_ao_cmd
    REQUIRES    INCLUDE_IPCOM INCLUDE_IPNET
}

/******************** Configuration Parameters *****************************/
/* INCLUDE_IPNET configuration parameters */

Parameter IPNET_MEMORY_LIMIT {
    NAME        Memory limit
    SYNOPSIS    Maximum amount of dynamic memory the stack is allowed to \
                use.
    TYPE        uint
    DEFAULT     16777216
}

Parameter IPNET_DST_CACHE_LIMIT {
    NAME        Destination cache number limit
    SYNOPSIS    Maximum amount of destination cache number the stack is \
                allowed to use. Set to 0 if do not limit(default)
    TYPE        uint
    DEFAULT     0
}

Parameter IPNET_SLAB_DESC_0 {
    NAME        Slab cache descriptor 0
    SYNOPSIS    Descriptor 0 in the slab cache configuration array. \
                The fields are: \
                mtu -   The maximum MTU this buffer can hold. \
                flags - The IPCOM_SLAB_F_xxx flags for this buffer.
    TYPE        struct Ipnet_pkt_pool_slab_desc
    DEFAULT     IPNET_ETH_MTU,              IPCOM_SLAB_F_AVERAGE
}

Parameter IPNET_SLAB_DESC_1 {
    NAME        Slab cache descriptor 1
    SYNOPSIS    Descriptor 0 in the slab cache configuration array. \
                The fields are: \
                mtu -   The maximum MTU this buffer can hold. \
                flags - The IPCOM_SLAB_F_xxx flags for this buffer.
    TYPE        struct Ipnet_pkt_pool_slab_desc
    DEFAULT     3000,                       IPCOM_SLAB_F_FEW
}

Parameter IPNET_SLAB_DESC_2 {
    NAME        Slab cache descriptor 2
    SYNOPSIS    Descriptor 0 in the slab cache configuration array. \
                The fields are: \
                mtu -   The maximum MTU this buffer can hold. \
                flags - The IPCOM_SLAB_F_xxx flags for this buffer.
    TYPE        struct Ipnet_pkt_pool_slab_desc
    DEFAULT     10000,                      IPCOM_SLAB_F_ONE
}

Parameter IPNET_SLAB_DESC_3 {
    NAME        Slab cache descriptor 3
    SYNOPSIS    Descriptor 0 in the slab cache configuration array. \
                The fields are: \
                mtu -   The maximum MTU this buffer can hold. \
                flags - The IPCOM_SLAB_F_xxx flags for this buffer.
    TYPE        struct Ipnet_pkt_pool_slab_desc
    DEFAULT     IPNET_PKT_POOL_MAX_MTU + 1, IPCOM_SLAB_F_ONE
}

Parameter IPNET_SLAB_DESC_4 {
    NAME        Slab cache descriptor 4
    SYNOPSIS    Descriptor 0 in the slab cache configuration array. \
                The fields are: \
                mtu -   The maximum MTU this buffer can hold. \
                flags - The IPCOM_SLAB_F_xxx flags for this buffer.
    TYPE        struct Ipnet_pkt_pool_slab_desc
    DEFAULT     0
}

Parameter IPNET_SLAB_DESC_5 {
    NAME        Slab cache descriptor 5
    SYNOPSIS    Descriptor 0 in the slab cache configuration array. \
                The fields are: \
                mtu -   The maximum MTU this buffer can hold. \
                flags - The IPCOM_SLAB_F_xxx flags for this buffer.
    TYPE        struct Ipnet_pkt_pool_slab_desc
    DEFAULT     0
}

Parameter IPNET_MAX_REASSEMBLY_LIST_LEN {
    NAME        Reassembly list length
    SYNOPSIS    Maximum number of partially reassembled fragmentation \
                chains that is allowed to be present at any time. The \
                oldest fragmentation list will be dropped if this this \
                limit is exceeded.
    TYPE        uint
    DEFAULT     10
}

Parameter IPNET_MAX_DGRAM_FRAG_LIST_LEN {
    NAME        IP-datagram fragment list length
    SYNOPSIS    Maximum number of fragments an individual IP-datagram \
                is allowed to consist of. The partly reassembled \
                IP-datagram is dropped if this limit is exceeded.
    TYPE        uint
    DEFAULT     100
}

Parameter IPNET_CACHE_BUFSIZE {
    NAME        Cache buffer size
    SYNOPSIS    Trailing Ipcom_pkt cache buffer to protect dynamic buffer \
                end marks.
    TYPE        uint
    DEFAULT     0
}

Parameter IPNET_MAX_INPUT_PKTS {
    NAME        Max input queue length
    SYNOPSIS    Defines the maximum number of packets that can be stored \
                in the packet input queue.
    TYPE        uint
    DEFAULT     32
}

Parameter IPNET_REASSEMBLY_TIMEOUT {
    NAME        Reassembly timeout
    SYNOPSIS    Number of seconds IPNET will keep incomplete datagram \
                fragments in the reassembly list before discarding them. \
                RFC2460 states default 60 seconds.
    TYPE        uint
    DEFAULT     60
}

/* INCLUDE_IPCOM_USE_INET configuration parameters */
Parameter INET_MIN_MTU_SIZE {
    NAME        Minimum mtu size
    SYNOPSIS    The smallest path MTU expected in any route. All Internet \
                routers should be able to handle 576 octets. This value is \
                used by some ICMP messages that include data from the packet \
                that caused an ICMP message to be sent.
    TYPE        uint
    DEFAULT     576
}

Parameter INET_BASE_HOP_LIMIT {
    NAME        Base hop limit
    SYNOPSIS    The default hop limit for IPv4 packets.
    TYPE        char *
    DEFAULT     "64"
}

Parameter INET_SEND_GRATUITOUS_ARP {
    NAME        Gratuitous ARP
    SYNOPSIS    Send gratuitous ARP when addresses are added
    TYPE        char *
    DEFAULT     "yes"
}

Parameter INET_DELETE_ADDR_ON_DUPLICATE_DETECT {
    NAME        Delete address on duplicate detect
    SYNOPSIS    Automatically remove a configure IPv4 address upon \
                duplicate address detection (gratuitous ARP).
    TYPE        char *
    DEFAULT     "yes"
}

Parameter INET_MAX_PKTS_PENDING {
    NAME        Maximum pending packets
    SYNOPSIS    Number of packets that can be waiting for IPv4 to link layer \
                resolution to finish.
    TYPE        char *
    DEFAULT     "3"
}

Parameter INET_MAX_UNICAST_SOLICIT {
    NAME        Maximum unicast solicit
    SYNOPSIS    Number of unicast ARP request messages should be sent \
                before starting to use multicast solicits.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_MAX_MULTICAST_SOLICIT {
    NAME        Maximum multicast solicit
    SYNOPSIS    Number of ARP request messages should be resent before \
                staring to use application probes.
    TYPE        char *
    DEFAULT     "9"
}

Parameter INET_MAX_APP_SOLICIT {
    NAME        Maximum application solicit
    SYNOPSIS    Number of resolve message that is sent to routing/netlink \
                sockets if ARP probes failed (or is disabled).
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_BASE_REACHABLE_TIME {
    NAME        Base reachable time
    SYNOPSIS    Duration, in seconds, that an entry in the ARP cache is \
                in reachable state.
    TYPE        char *
    DEFAULT     "30"
}

Parameter INET_BASE_RETRANSMIT_TIME {
    NAME        Base retransmit time
    SYNOPSIS    Number of seconds to wait between retransmits.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_DELAY_FIRST_PROBE_TIME {
    NAME        Delay first probe time
    SYNOPSIS    Duration, in seconds, to wait for a stale ARP entry to \
                become reachable before forcing a probe, packets will be \
                sent using the stale entry during this time.
    TYPE        char *
    DEFAULT     "5"
}

Parameter INET_NBR_CACHE_TO_LIVE_TIME {
    NAME        Neighbor cache to live
    SYNOPSIS    Duration, in seconds, that can pass before a stale entry \
                in the ARP cache is deleted.
    TYPE        char *
    DEFAULT     "1200"
}

Parameter INET_NBR_MIN_RANDOM_FACTOR {
    NAME        Minimum random factor
    SYNOPSIS    The minimum value of a random factor.
    TYPE        char *
    DEFAULT     "50"
}

Parameter INET_NBR_MAX_RANDOM_FACTOR {
    NAME        Maximum random factor
    SYNOPSIS    The Maximum value of a random factor.
    TYPE        char *
    DEFAULT     "150"
}

Parameter INET_DISABLE_BROADCAST_FWD {
    NAME        Disable forwarding of broadcasts
    SYNOPSIS    Set to 1 to disable forwarding of broadcasts.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_DST_CACHE_TO_LIVE_TIME {
    NAME        Destination cache to live
    SYNOPSIS    Duration, in seconds, that can pass before an entry in the \
                destination cache is deleted, this lifetime is used by on \
                entries created as a response to redirect and need frag \
                ICMP messages.
    TYPE        char *
    DEFAULT     "600"
}

Parameter INET_ICMP_RATE_LIMIT_BUCKET_SIZE {
    NAME        ICMP rate limit bucket size
    SYNOPSIS    The number of ICMP messages the stack is allowed to per \
                ICMP Ratelimit Interval millisecond interval.
    TYPE        char *
    DEFAULT     "100"
}

Parameter INET_ICMP_RATE_LIMIT_INTERVAL {
    NAME        ICMP rate limit interval
    SYNOPSIS    ICMP Ratelimit Interval millisecond interval.
    TYPE        char *
    DEFAULT     "1000"
}

Parameter INET_ICMP_REDIRECT_SEND {
    NAME        ICMP redirect send
    SYNOPSIS    Set to 2 if a redirect should be sent and the original \
                message should be forwarded (default). \
                Set to 1 if a redirect should be sent but the original \
                message should be discarded. \
                Set to 0 if no redirect should be sent but the original \
                message should be forwarded. \
                Set to -1 if no redirect should be sent and the original \
                message should be discarded.
    TYPE        char *
    DEFAULT     "2"
}

Parameter INET_ICMP_REDIRECT_RECEIVE {
    NAME        ICMP redirect receive
    SYNOPSIS    Set to != 0 if redirect messages should be accepted and \
                processed.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_ICMP_IGNORE_ECHO_REQ {
    NAME        ICMP ignore echo request
    SYNOPSIS    Set to 0 if the stack should answer to echo requests
    TYPE        char *
    DEFAULT     "0"
}

Parameter INET_ICMP_IGNORE_TIMESTAMP_REQ {
    NAME        ICMP ignore timestamp request
    SYNOPSIS    Set to 0 if the stack should answer to timestamp requests.
    TYPE        char *
    DEFAULT     "0"
}

Parameter INET_ICMP_SEND_TIME_EXCEEDED {
    NAME        ICMP send time exceeded
    SYNOPSIS    Set to != 0 if the stack should send time exceeded messages.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_ICMP_SEND_DST_UNREACHABLE {
    NAME        ICMP send destination unreachable
    SYNOPSIS    Set to != 0 if the stack should send destination unreachable.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_ICMP_IGNORE_BROADCAST {
    NAME        ICMP ignore broadcast
    SYNOPSIS    Set to 1 if stack should ignore icmp requests from broadcast addresses.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_UDP_CHECKSUM {
    NAME        UDP checksum for IPv4
    SYNOPSIS    Set to 0 to disable UDP checksum for IPv4.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET_RANDOM_IP_ID {
    NAME        Random IP ID for IPv4
    SYNOPSIS    Set this parameter to 1 to enable random IP ID for IPv4.
    TYPE        char *
    DEFAULT     "0"
}

/* INCLUDE_IPCOM_USE_INET6 configuration parameters */
Parameter INET6_MIN_MTU_SIZE {
    NAME        Minimum mtu size
    SYNOPSIS    The smallest path MTU expected in any route. All Internet \
                routers should be able to handle 1280 octets. This value is \
                used by some ICMP messages that include data from the packet \
                that caused an ICMP message to be sent.
    TYPE        uint
    DEFAULT     1280
}

Parameter INET6_BASE_HOP_LIMIT {
    NAME        Base hop limit
    SYNOPSIS    The default hop limit for IPv6 packets.
    TYPE        char *
    DEFAULT     "64"
}

Parameter INET6_MAX_PKTS_PENDING {
    NAME        Maximum pending packets
    SYNOPSIS    Number of packets that can be waiting for IPv6 to link layer \
                resolution to finish.
    TYPE        char *
    DEFAULT     "3"
}

Parameter INET6_MAX_UNICAST_SOLICIT {
    NAME        Maximum unicast solicit
    SYNOPSIS    Number of unicast neighbor discovery messages should be \
                sent for ND entry update before starting to use multicast \
                solicit.
    TYPE        char *
    DEFAULT     "3"
}

Parameter INET6_MAX_MULTICAST_SOLICIT {
    NAME        Maximum multicast solicit
    SYNOPSIS    Number of neighbor discovery messages should be resent \
                before staring to use application solicit. Setting this \
                to non-zero will cause IPv6 ready tests to fail, so change \
                it only if you know what you are doing.
    TYPE        char *
    DEFAULT     "0"
}

Parameter INET6_MAX_APP_SOLICIT {
    NAME        Maximum application solicit
    SYNOPSIS    Number of resolve message that is sent to routing/netlink \
                sockets if ND probes failed (or is disabled).
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_DAD_TRANSMITS {
    NAME        Number of duplicate address detection transmits
    SYNOPSIS    Number of times the node should test the address for \
                uniqueness before assigning it to the interface (set to 0 \
                to turn of Duplicate Address Detection).
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_BASE_REACHABLE_TIME {
    NAME        Base reachable time
    SYNOPSIS    Duration, in seconds, that an entry in the NDP cache is \
                in reachable state.
    TYPE        char *
    DEFAULT     "30"
}

Parameter INET6_BASE_RETRANSMIT_TIME {
    NAME        Base retransmit time
    SYNOPSIS    Number of seconds to wait between retransmits.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_DELAY_FIRST_PROBE_TIME {
    NAME        Delay first probe time
    SYNOPSIS    Duration, in seconds, to wait for a stale ND entry to \
                become reachable before forcing a probe, packets will be \
                sent using the stale entry during this time.
    TYPE        char *
    DEFAULT     "5"
}

Parameter INET6_NBR_CACHE_TO_LIVE_TIME {
    NAME        Neighbor cache to live
    SYNOPSIS    Duration, in seconds, that can pass before a stale entry \
                in the neighbor cache is deleted.
    TYPE        char *
    DEFAULT     "1200"
}

Parameter INET6_DST_CACHE_TO_LIVE_TIME {
    NAME        Destination cache to live
    SYNOPSIS    Duration, in seconds, that can pass before an entry in the \
                destination cache is deleted, this lifetime is used by on \
                entries created as a response to redirect and need frag \
                ICMP messages.
    TYPE        char *
    DEFAULT     "600"
}

Parameter INET6_ROUTER_LIFETIME {
    NAME        Router lifetime
    SYNOPSIS    The number of seconds this router can be used as gateway \
                after a router advertisement had been sent, only used when \
                configured as a router.
    TYPE        char *
    DEFAULT     "1800"
}

Parameter INET6_ICMP_RATE_LIMIT_BUCKET_SIZE {
    NAME        ICMP rate limit bucket size
    SYNOPSIS    The number of ICMPv6 messages the stack is allowed to per \
                ICMP Ratelimit Interval millisecond interval.
    TYPE        char *
    DEFAULT     "100"
}

Parameter INET6_ICMP_RATE_LIMIT_INTERVAL {
    NAME        ICMP rate limit interval
    SYNOPSIS    ICMP Ratelimit Interval millisecond interval. Set to 0 to \
                disable the rate limiter.
    TYPE        char *
    DEFAULT     "1000"
}

Parameter INET6_ICMP_REDIRECT_SEND {
    NAME        ICMP redirect send
    SYNOPSIS    Set to 2 if a redirect should be sent and the original \
                message should be forwarded (default). \
                Set to 1 if a redirect should be sent but the original \
                message should be discarded. \
                Set to 0 if no redirect should be sent but the original \
                message should be forwarded. \
                Set to -1 if no redirect should be sent and the original \
                message should be discarded.
    TYPE        char *
    DEFAULT     "2"
}

Parameter INET6_ICMP_REDIRECT_RECEIVE {
    NAME        ICMP redirect receive
    SYNOPSIS    Set to != 0 if redirect messages should be accepted and \
                processed.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_ICMP_IGNORE_ECHO_REQ {
    NAME        ICMP ignore echo request
    SYNOPSIS    Set to 0 if the stack should answer to echo requests
    TYPE        char *
    DEFAULT     "0"
}

Parameter INET6_ICMP_SEND_TIME_EXCEEDED {
    NAME        ICMP send time exceeded
    SYNOPSIS    Set to != 0 if the stack should send time exceeded messages.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_ICMP_SEND_DST_UNREACHABLE {
    NAME        ICMP send destination unreachable
    SYNOPSIS    Set to != 0 if the stack should send destination unreachable.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_ACCEPT_RTADV {
    NAME        Accept router advertisements message
    SYNOPSIS    Enable/disable processing of router advertisements message.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_AUTO_CONFIG {
    NAME        Auto configure IPv6 address
    SYNOPSIS    Enable/disable address auto configuration.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_ADD_AUTONOMOUS_ADDR {
    NAME        Add autonomous address
    SYNOPSIS    Should this node create addresses from router advertisement messages.
    TYPE        char *
    DEFAULT     "yes"
}

Parameter INET6_RTHDR0 {
    NAME        Routing header type processing
    SYNOPSIS    Enable/disable processing of routing header type 0 \
                It is disabled by default since its a potential \
                security problem
    TYPE        char *
    DEFAULT     "0"
}

/* INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT configuration parameters */

/*
 * The following configuration parameters support RFC3041, Privacy Extensions
 * for Stateless Address Autoconfiguration in IPv6. These configuration
 * parameters are only meaningful if IPNET is compiled with the
 * IPNET_USE_RFC3401 directive.
 */

Parameter INET6_ENABLE_PRIVACY_EXTENSONS {
    NAME        Enable privacy extensions
    SYNOPSIS    Enable/disable privacy extensions.
    TYPE        char *
    DEFAULT     "1"
}

Parameter INET6_TEMP_VALID_LIFETIME {
    NAME        Maximum lifetime
    SYNOPSIS    Maximum lifetime, in seconds, of temporary addresses. Default \
                is 1 week.
    TYPE        char *
    DEFAULT     "604800"
}

Parameter INET6_TEMP_PREFERRED_LIFETIME {
    NAME        Maximum preferred time
    SYNOPSIS    Maximum preferred time, in seconds, of temporary addresses. \
                Default is 1 day.
    TYPE        char *
    DEFAULT     "86400"
}

Parameter INET6_REGEN_ADVANCE {
    NAME        Expired time
    SYNOPSIS    Number of seconds before the current temporary address goes \
                non-preferred, that a new address will be generated. \
                Default is 5 seconds by RFC, but that is very tight so \
                30 seconds is used instead.
    TYPE        char *
    DEFAULT     "30"
}

/* INCLUDE_IPNET6_PRIVACY_INTERFACE_CONFIGS configuration parameters */
Parameter INET6_IFLIST_ENABLE_PRIVACY_EXTENSONS {
    NAME        Enable privacy extensions
    SYNOPSIS    Enable/disable privacy extensions. This parameter can be \
                configure on a per-interface basis in the form of \
                "<ifparam>=<value>". Each pair of "<ifparam>=<value>" is \
                semicolon separated. E.g, "eth0=1".
    TYPE        char *
    DEFAULT     ""
}

Parameter INET6_IFLIST_TEMP_VALID_LIFETIME {
    NAME        Maximum lifetime
    SYNOPSIS    Maximum lifetime, in seconds, of temporary addresses. Default \
                is 1 week. This parameter can be configure on a per-interface \
                basis in the form of "<ifparam>=<value>". Each pair of \
                "<ifparam>=<value>" is semicolon separated. E.g, "eth0=604800".
    TYPE        char *
    DEFAULT     ""
}

Parameter INET6_IFLIST_TEMP_PREFERRED_LIFETIME {
    NAME        Maximum preferred time
    SYNOPSIS    Maximum preferred time, in seconds, of temporary addresses. \
                Default is 1 day. This parameter can be configure on a \
                per-interface basis in the form of "<ifparam>=<value>". \
                Each pair of "<ifparam>=<value>" is semicolon separated. \
                E.g, "eth0=86400".
    TYPE        char *
    DEFAULT     ""
}

Parameter INET6_IFLIST_REGEN_ADVANCE {
    NAME        Expired time
    SYNOPSIS    Number of seconds before the current temporary address goes \
                non-preferred, that a new address will be generated. \
                Default is 5 seconds by RFC, but that is very tight so \
                30 seconds is used instead. This parameter can be configure \
                on a per-interface basis in the form of "<ifparam>=<value>". \
                Each pair of "<ifparam>=<value>" is semicolon separated. \
                E.g, "eth0=30".
    TYPE        char *
    DEFAULT     ""
}

/* INCLUDE_IPNET_USE_NAT configuration parameters */
Parameter IPNAT_ICMP_MAPPING_TIMEOUT {
    NAME        icmp mapping timeout
    SYNOPSIS    Specifies the timeout in seconds until an icmp mapping \
                expires.
    TYPE        char *
    DEFAULT     "10"
}

Parameter IPNAT_UDP_MAPPING_TIMEOUT {
    NAME        udp mapping timeout
    SYNOPSIS    Specifies the timeout in seconds until an udp mapping \
                expires.
    TYPE        char *
    DEFAULT     "60"
}

Parameter IPNAT_TCP_MAPPING_TIMEOUT {
    NAME        tcp mapping timeout
    SYNOPSIS    Specifies the timeout in seconds until a tcp mapping \
                expires.
    TYPE        char *
    DEFAULT     "432000"
}

Parameter IPNAT_OTHER_MAPPING_TIMEOUT {
    NAME        other mapping timeout
    SYNOPSIS    Specifies the timeout in seconds until other mappings \
                expires.
    TYPE        char *
    DEFAULT     "60"
}

Parameter IPNAT_MAX_MAPPING {
    NAME        max active mapping
    SYNOPSIS    The maximum number of active NAT mappings.
    TYPE        char *
    DEFAULT     "1000"
}

Parameter IPNAT_AUTOPORT_START_INTERVAL {
    NAME        auto port start interval
    SYNOPSIS    Start of the automatically NATed ports interval.
    TYPE        char *
    DEFAULT     "29000"
}

Parameter IPNAT_AUTOPORT_END_INTERVAL {
    NAME        auto port end interval
    SYNOPSIS    End of the automatically NATed ports interval.
    TYPE        char *
    DEFAULT     "29999"
}

/* INCLUDE_IPTCP configuration parameters */
#ifndef _WRS_CONFIG_COMPONENT_IPLITE
Parameter TCP_CONN_TIMEOUT {
    NAME        Connection timeout
    SYNOPSIS    Define the number of seconds IPNET will try to create a TCP \
                connection before giving up.
    TYPE        int
    DEFAULT     75
}

Parameter TCP_MAX_RETRANSMITS {
    NAME        Max retransmits
    SYNOPSIS    Maximum number of times a TCP segment will be resent before \
                giving up with an IPTCP_ERRNO_ETIMEDOUT error. Exponential \
                back off is applied before each resend (max time between \
                two resends is 1 minute).
    TYPE        int
    DEFAULT     10
}

Parameter IPTCP_MAX_RETRAMSMITS_IN_TRANSIENT {
    NAME        Max retransmits transient states
    SYNOPSIS    Defines the maximum number of resend attempts to use when \
                the number of sessions in the transient state exceeds the \
                transient threshold set with iptcp.TransientTresh.
    TYPE        int
    DEFAULT     2
}

Parameter IPTCP_MAX_TRANSIENT {
    NAME        Max transient
    SYNOPSIS    Defines the maximum number of sessions that can be in a \
                transient state. Once the value is reached, the session with \
                the longest transient state period is dropped and the session \
                is set to the CLOSED state. The session is then removed from \
                the list of sessions in a transient state.
    TYPE        int
    DEFAULT     20
}

Parameter IPTCP_TRANSIENT_THRESH {
    NAME        Transient tresh
    SYNOPSIS    This threshold refers to the number of sessions in a transient \
                state. When this threshold is exceeded, the number of resend \
                attempts is reduced to a value set by \
                iptcp.MaxRetransmitsTransientStates.
    TYPE        int
    DEFAULT     5
}

Parameter TCP_MSL {
    NAME        Maximum segment lifetime
    SYNOPSIS    TCP sockets that enter the TIME_WAIT state will be in that \
                state for 2 times this value. Should be 120 sec (2 min) \
                according to RFC 793, but most TCP/IP stacks sets this \
                value to 30 seconds.
    TYPE        int
    DEFAULT     30
}

Parameter TCP_WUPW {
    NAME        Maximum waiting time of the receiver update its window size
    SYNOPSIS    If the tcp receiver never announces a window greater than \
                MSS, the sender won't want to send anything smaller to \
                avoid silly window syndrome. This value is the maximum \
                waiting time in milliseconds of the receiver update its \
                window size. If it is timeout, just send the data anyway \
                to make forward progress.
    TYPE        int
    DEFAULT     300
}

Parameter TCP_MAX_MSS {
    NAME        Maximum segment size
    SYNOPSIS    Defines the largest Maximum Segment Size that TCP will \
                ever suggest. The actual MSS suggested might be smaller \
                than this number if depending on MTU for the interface. \
                Set to 0 if the largest MSS allowed by the MTU should be used.
    TYPE        int
    DEFAULT     0
}

Parameter TCP_USE_TIMESTAMP {
    NAME        Use Timestamp
    SYNOPSIS    Determines if the Timestamp option should be included \
                in all segments for peers that support it. Set to 0 if the \
                Timestamp option should never be used.
    TYPE        int
    DEFAULT     0
}

Parameter TCP_USE_RFC1122_URGENT_DATA {
    NAME        Use RFC1122 urgent data
    SYNOPSIS    Set to "1" to use urgent data as described in RFC 1122. \
                Set to "0" to use urgent data as described in RFC 793. \
                Should be set to 0 since that is how most stacks works, \
                must be set to 1 in order successfully pass Ixia ANVL \
                TCP-CORE group 19 tests.
    TYPE        int
    DEFAULT     0
}

Parameter TCP_SEGMENT_MULTIPLIER {
    NAME        Segment size multiplier
    SYNOPSIS    The size multiplier that will be used on outgoing \
                segments when the outgoing interface support TCP \
                Segmentation Offload. Higher value will generally give \
                better performance, but any factor higher than 2 is not \
                guaranteed to work on all network cards.
    TYPE        int
    DEFAULT     2
}

Parameter TCP_LAND_ATTACK_PROTECTION {
    NAME        Enable/disable LAND attack protection on TCP
    SYNOPSIS    Set to 1 to prevent LAND attacks on TCP implementation.
    TYPE        int
    DEFAULT     1
}

Parameter TCP_ALLOW_ZERO_WINDOW
{
    NAME        Allow zero window
    SYNOPSIS    Enable/disable acceptance of the peer window being set \
                to zero in the ACK of the SYN/ACK. An attacker can use \
                zero window to keep the node in persist time for a long \
                time.
    TYPE        int
    DEFAULT     0
}

Parameter TCP_ALLOW_TINY_WINDOW
{
    NAME        Allow tiny window
    SYNOPSIS    Enable/disable acceptance of the peer window being set \
                to a value less that one MSS in the ACK of the SYN/ACK. \
                An attacker can use zero window to keep the node in \
                persist time for a long. Enabling can sometimes cause \
                cause connection trouble in environments that contains \
                traffic shapers which modifies the peer windows of TCP \
                segments. This is why this is allowed by default.
    TYPE        int
    DEFAULT     1
}

Parameter TCP_PERSIST_TMO
{
    NAME        Persist probe timeout
    SYNOPSIS    The maximum duration, in seconds, a peer can keep \
                announcing a receive window of size zero. \
                Default value is "0" which means "infinite".
    TYPE        int
    DEFAULT     0
}

Parameter TCP_CLAMP_MSS
{
    NAME        Clamp MSS for session that goes through a gateway
    SYNOPSIS    The maximum MSS that will be used for TCP sessions \
                to nodes that is not link local. \
                Default value is 0 which means that path MTU \
                will be used to calculate the MSS.
    TYPE        int
    DEFAULT     0
}

Parameter TCP_DEFAULT_BACKLOG_SIZE
{
    NAME        Size of the default listen backlog
    SYNOPSIS    Default backlock size, this is the value that will \
                be used when 0 is passed and the 2:nd argument to \
                listen().
    TYPE        int
    DEFAULT     5
}

Parameter TCP_KEEP_IDLE
{
    NAME        Keep alive idle time
    SYNOPSIS    The default time a TCP connection must be idle \
                before the first keep-alive packet is sent (in seconds).
    TYPE        int
    DEFAULT     7200
}

Parameter TCP_KEEP_INTVL
{
    NAME        Keep alive interval
    SYNOPSIS    The time between each keep-alive probe.
    TYPE        int
    DEFAULT     75
}

Parameter TCP_KEEP_CNT
{
    NAME        Number of keep alive packets  
    SYNOPSIS    Number of unsuccessful keep-alive probes \
                that will be sent before dropping the connection.
    TYPE        int
    DEFAULT     10
}

Parameter TCP_USE_RFC6528_SECURE_ISN
{
    NAME        Use RFC6528 secure Initial Sequence Number
    SYNOPSIS    The secure ISN described in RFC6528 will be used in TCP three-way handshake,\
                which will mitigate sequence number guessing attacks.\
                Set to "1" to use secure ISN, otherwise, set to "0".
    TYPE        int
    DEFAULT     1
}

Parameter TCP_DELAY_ACK_TIME {
    NAME        Delay ACK time
    SYNOPSIS    Define the number of milliseconds reciever will reply to peer with \
                a delay ACK.
    TYPE        int
    DEFAULT     200
}

Parameter TCP_IMMEDIATE_ACK_FOR_PSH {
    NAME        Immediate ACK for PSH
    SYNOPSIS    Set to 1 to reply a ACK immediately for PSH.
    TYPE        int
    DEFAULT     1
}
#endif /* !_WRS_CONFIG_COMPONENT_IPLITE */