1150 lines
40 KiB
Mathematica
1150 lines
40 KiB
Mathematica
/* 00comp_ipnet_protos.cdf - IPNet Protocols Component configuration file */
|
|
|
|
/*
|
|
* Copyright (c) 2006-2008, 2010-2015 Wind River Systems, Inc.
|
|
*
|
|
* The right to copy, distribute or otherwise make use of this software
|
|
* may be licensed only pursuant to the terms of an applicable Wind River
|
|
* license agreement. No license to Wind River intellectual property rights
|
|
* is granted herein. All rights not licensed by Wind River are reserved
|
|
* by Wind River.
|
|
*/
|
|
|
|
/*
|
|
modification history
|
|
--------------------
|
|
02n,28dec15,h_x Port feature US71092 for 6.9
|
|
02m,11mar15,wfl Add parameter IPNET_DST_CACHE_LIMIT for INCLUDE_IPNET (VXW6-83994).
|
|
02l,08feb15,ljl Add parameter TCP_USE_RFC6528_SECURE_ISN for INCLUDE_IPTCP (VXW6-84130).
|
|
02k,10jul14,h_x Fix VXW6-82894
|
|
02j,25may12,ggz Deleted param IPNET_ROUTE_MAX_CLONE_COUNT. Defect WIND00340576.
|
|
02i,19apr12,fei Added for TCPAO(RFC5925).
|
|
02h,01mar13,xhs Fix WIND00405569, adding some missed parameters.
|
|
02g,24aug11,h_s Added the support for tcp keep alive parameters.
|
|
02f,25jan11,dlk Changing default IPNET_ROUTE_MAX_CLONE_COUNT to 50000.
|
|
02e,20jan11,dlk Adding IPNET_ROUTE_MAX_CLONE_COUNT parameter.
|
|
02d,14oct10,xhs for iplite
|
|
02c,02oct08,jre Added INET_DELETE_ADDR_ON_DUPLICATE_DETECT
|
|
02b,23sep08,rme Misspelled words corrected
|
|
02a,19sep07,rme Added missing backslashes
|
|
01z,07sep07,rme Replaced SELECTION_IPCOM_FS with SELECT_IPCOM_FS in INCLUDE_IPNET_USE_NAT
|
|
01y,13jul07,dlk Make existing INET6_RTHDR0 a parameter of INCLUDE_IPCOM_USE_INET6.
|
|
01x,25apr07,tkf Add INCLUDE_IPCOM_USE_INET6_ONLY component to support
|
|
Pv6-Only Build.
|
|
01m,06mar07,kch Changed IPNAT_ICMP_MAPPING_TIMEOUT default value from 5 to
|
|
10 seconds (WIND00089895).
|
|
01l,07feb07,tkf Add INCLUDE_IPNET_USE_NAT dependency on
|
|
SELECTION_IPCOM_FS.
|
|
01k,03jan07,kch Updated default value for IPNET_CACHE_BUFSIZE,
|
|
INET6_MAX_MULTICAST_SOLICIT and TCP_USE_TIMESTAMP. Also
|
|
removed duplicate ipnet_config.c configlette property from
|
|
INCLUDE_IPCOM_USE_INET, INCLUDE_IPCOM_USE_INET6 and
|
|
INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT.
|
|
01j,20dec06,kch Changed INET_MAX_MULTICAST_SOLICIT default value from 0 to 9.
|
|
01i,01dec06,kch Changed INET_MIN_MTU_SIZE default value to 68. Also added
|
|
additional configuration parameters for tcp.
|
|
01h,23sep06,kch Moved multicast routing and proxy components to
|
|
02comp_ipnet_mcast.cdf. Also moved INCLUDE_IPNET_USE_VRRPD to
|
|
02comp_ipnet_vrrp.cdf and INCLUDE_IPRADIUS to
|
|
02comp_ipnet_radius.cdf.
|
|
01g,20sep06,tkf Add INCLUDE_IPV4 and INCLUDE_IPV6 for backwards compatibility.
|
|
01f,07sep06,kch Removed ipnet_nat_proxy_dns symbol from INCLUDE_IPNET_USE_NAT.
|
|
01e,23aug06,kch Updated default values for INET_BASE_REACHABLE_TIME and
|
|
INET_MAX_MULTICAST_SOLICIT. Also added support for
|
|
autoconf privacy extensions and NAT configurations. Moved
|
|
proxyArp configuration parameters to INCLUDE_IPPROXYARP.
|
|
01d,12aug06,kch Added INCLUDE_IPNET_USE_VRRPD.
|
|
01c,02jul06,kch Corrected dependency problems for INCLUDE_IPMCP_USE_IGMP,
|
|
INCLUDE_IPMCP_USE_MLD and INCLUDE_IPMCP components.
|
|
01b,26jun06,dlk Remove ipnet_radvd.o as a module of INCLUDE_IPCOM_USE_INET6;
|
|
it belongs to INCLUDE_IPRADVD.
|
|
01a,22may06,kch created.
|
|
*/
|
|
|
|
Component INCLUDE_IPNET {
|
|
NAME IPNET
|
|
SYNOPSIS IPNET
|
|
REQUIRES INCLUDE_IPCOM
|
|
MODULES ipnet.o
|
|
CONFIGLETTES ipnet_config.c
|
|
CFG_PARAMS IPNET_MAX_INPUT_PKTS \
|
|
IPNET_REASSEMBLY_TIMEOUT \
|
|
IPNET_CACHE_BUFSIZE \
|
|
IPNET_MEMORY_LIMIT \
|
|
IPNET_DST_CACHE_LIMIT \
|
|
IPNET_MAX_REASSEMBLY_LIST_LEN \
|
|
IPNET_MAX_DGRAM_FRAG_LIST_LEN \
|
|
IPNET_SLAB_DESC_0 \
|
|
IPNET_SLAB_DESC_1 \
|
|
IPNET_SLAB_DESC_2 \
|
|
IPNET_SLAB_DESC_3 \
|
|
IPNET_SLAB_DESC_4 \
|
|
IPNET_SLAB_DESC_5
|
|
}
|
|
|
|
Component INCLUDE_IPCOM_USE_INET {
|
|
NAME IPv4
|
|
SYNOPSIS IPNet IPv4 support
|
|
#ifdef _WRS_CONFIG_COMPONENT_IPLITE
|
|
MODULES iplite_ip4.o
|
|
LINK_SYMS iplite_ip4_input
|
|
REQUIRES INCLUDE_IPLITE
|
|
#else
|
|
MODULES ipnet_ip4.o
|
|
LINK_SYMS ipnet_ip4_input
|
|
REQUIRES INCLUDE_IPNET
|
|
#endif
|
|
CFG_PARAMS INET_MIN_MTU_SIZE INET_BASE_HOP_LIMIT \
|
|
INET_SEND_GRATUITOUS_ARP \
|
|
INET_DELETE_ADDR_ON_DUPLICATE_DETECT \
|
|
INET_MAX_PKTS_PENDING INET_MAX_UNICAST_SOLICIT \
|
|
INET_MAX_MULTICAST_SOLICIT INET_MAX_APP_SOLICIT \
|
|
INET_BASE_REACHABLE_TIME INET_BASE_RETRANSMIT_TIME \
|
|
INET_DELAY_FIRST_PROBE_TIME INET_NBR_CACHE_TO_LIVE_TIME \
|
|
INET_DST_CACHE_TO_LIVE_TIME \
|
|
INET_NBR_MIN_RANDOM_FACTOR INET_NBR_MAX_RANDOM_FACTOR \
|
|
INET_DISABLE_BROADCAST_FWD \
|
|
INET_ICMP_RATE_LIMIT_BUCKET_SIZE \
|
|
INET_ICMP_RATE_LIMIT_INTERVAL INET_ICMP_REDIRECT_SEND \
|
|
INET_ICMP_REDIRECT_RECEIVE INET_ICMP_IGNORE_ECHO_REQ \
|
|
INET_ICMP_IGNORE_TIMESTAMP_REQ \
|
|
INET_ICMP_SEND_TIME_EXCEEDED \
|
|
INET_ICMP_SEND_DST_UNREACHABLE \
|
|
INET_ICMP_IGNORE_BROADCAST \
|
|
INET_UDP_CHECKSUM \
|
|
INET_RANDOM_IP_ID
|
|
}
|
|
|
|
Component INCLUDE_IPV4 {
|
|
NAME IPv4
|
|
SYNOPSIS IPNet IPv4 support
|
|
INCLUDE_WHEN INCLUDE_IPCOM_USE_INET
|
|
}
|
|
|
|
Component INCLUDE_IPCOM_USE_INET6 {
|
|
NAME IPv6
|
|
SYNOPSIS IPv6
|
|
#ifdef _WRS_CONFIG_COMPONENT_IPLITE
|
|
LINK_SYMS iplite_ip6_input
|
|
REQUIRES INCLUDE_IPLITE
|
|
#else
|
|
LINK_SYMS ipnet_ip6_input
|
|
REQUIRES INCLUDE_IPNET
|
|
#endif
|
|
CFG_PARAMS INET6_MIN_MTU_SIZE INET6_BASE_HOP_LIMIT \
|
|
INET6_MAX_PKTS_PENDING INET6_MAX_UNICAST_SOLICIT \
|
|
INET6_MAX_MULTICAST_SOLICIT INET6_MAX_APP_SOLICIT \
|
|
INET6_DAD_TRANSMITS INET6_BASE_REACHABLE_TIME \
|
|
INET6_BASE_RETRANSMIT_TIME INET6_DELAY_FIRST_PROBE_TIME \
|
|
INET6_NBR_CACHE_TO_LIVE_TIME INET6_DST_CACHE_TO_LIVE_TIME \
|
|
INET6_ROUTER_LIFETIME INET6_ICMP_RATE_LIMIT_BUCKET_SIZE \
|
|
INET6_ICMP_RATE_LIMIT_INTERVAL INET6_ICMP_REDIRECT_SEND \
|
|
INET6_ICMP_REDIRECT_RECEIVE INET6_ICMP_IGNORE_ECHO_REQ \
|
|
INET6_ICMP_SEND_TIME_EXCEEDED \
|
|
INET6_ICMP_SEND_DST_UNREACHABLE INET6_ACCEPT_RTADV \
|
|
INET6_AUTO_CONFIG INET6_ADD_AUTONOMOUS_ADDR \
|
|
INET6_RTHDR0
|
|
}
|
|
|
|
Component INCLUDE_IPCOM_USE_INET6_ONLY {
|
|
NAME IPv6 Only
|
|
SYNOPSIS IPv6 only stack support. This component excludes IPv4 stack support.
|
|
REQUIRES INCLUDE_IPCOM_USE_INET6 INCLUDE_IPNET
|
|
EXCLUDES INCLUDE_IPCOM_USE_INET
|
|
}
|
|
|
|
Component INCLUDE_IPV6 {
|
|
NAME IPv6
|
|
SYNOPSIS IPNet IPv6 support
|
|
INCLUDE_WHEN INCLUDE_IPCOM_USE_INET6
|
|
}
|
|
|
|
Component INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT {
|
|
NAME autoconf privacy extensions
|
|
SYNOPSIS IPv6 autoconf privacy extensions support for RFC3401, \
|
|
Privacy Extensions for Stateless Address Auto \
|
|
configuration in IPv6. This requires the IPNet stack to \
|
|
be compiled with IPNET_USE_RFC3041 directive.
|
|
REQUIRES INCLUDE_IPCOM_USE_INET6 \
|
|
SELECT_IPNET6_AUTOCONF_PRIVACY_CONFIG
|
|
}
|
|
|
|
Selection SELECT_IPNET6_AUTOCONF_PRIVACY_CONFIG {
|
|
NAME autoconf privacy configurations
|
|
SYNOPSIS IPv6 autoconf privacy extensions configurations
|
|
COUNT 1-
|
|
CHILDREN INCLUDE_IPNET6_PRIVACY_GLOBAL_CONFIGS \
|
|
INCLUDE_IPNET6_PRIVACY_INTERFACE_CONFIGS
|
|
}
|
|
|
|
Component INCLUDE_IPNET6_PRIVACY_GLOBAL_CONFIGS {
|
|
NAME global configurations
|
|
SYNOPSIS IPv6 autoconf privacy extensions global configurations
|
|
REQUIRES INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT
|
|
CFG_PARAMS INET6_ENABLE_PRIVACY_EXTENSONS INET6_TEMP_VALID_LIFETIME \
|
|
INET6_TEMP_PREFERRED_LIFETIME INET6_REGEN_ADVANCE
|
|
}
|
|
|
|
Component INCLUDE_IPNET6_PRIVACY_INTERFACE_CONFIGS {
|
|
NAME Per-interface configurations
|
|
SYNOPSIS Per-interface IPv6 autoconf privacy configurations
|
|
REQUIRES INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT
|
|
CFG_PARAMS INET6_IFLIST_ENABLE_PRIVACY_EXTENSONS \
|
|
INET6_IFLIST_TEMP_VALID_LIFETIME \
|
|
INET6_IFLIST_TEMP_PREFERRED_LIFETIME \
|
|
INET6_IFLIST_REGEN_ADVANCE
|
|
}
|
|
|
|
Component INCLUDE_IPNET_USE_NAT {
|
|
NAME NAT
|
|
SYNOPSIS NAT
|
|
LINK_SYMS ipnet_nat_output_hook
|
|
REQUIRES INCLUDE_IPCOM_USE_INET
|
|
CFG_PARAMS IPNAT_ICMP_MAPPING_TIMEOUT IPNAT_UDP_MAPPING_TIMEOUT \
|
|
IPNAT_TCP_MAPPING_TIMEOUT IPNAT_OTHER_MAPPING_TIMEOUT \
|
|
IPNAT_MAX_MAPPING IPNAT_AUTOPORT_START_INTERVAL \
|
|
IPNAT_AUTOPORT_END_INTERVAL
|
|
}
|
|
|
|
#ifndef _WRS_CONFIG_COMPONENT_IPLITE
|
|
Component INCLUDE_IPTCP {
|
|
NAME TCP
|
|
SYNOPSIS Transmission Control Protocol
|
|
REQUIRES INCLUDE_IPCOM INCLUDE_IPNET
|
|
MODULES iptcp.o
|
|
CONFIGLETTES iptcp_config.c
|
|
CFG_PARAMS TCP_CONN_TIMEOUT TCP_MAX_RETRANSMITS TCP_MSL TCP_DELAY_ACK_TIME \
|
|
IPTCP_MAX_RETRAMSMITS_IN_TRANSIENT TCP_IMMEDIATE_ACK_FOR_PSH \
|
|
IPTCP_MAX_TRANSIENT IPTCP_TRANSIENT_THRESH \
|
|
TCP_MAX_MSS TCP_USE_TIMESTAMP \
|
|
TCP_USE_RFC1122_URGENT_DATA \
|
|
TCP_SEGMENT_MULTIPLIER \
|
|
TCP_LAND_ATTACK_PROTECTION \
|
|
TCP_ALLOW_ZERO_WINDOW \
|
|
TCP_ALLOW_TINY_WINDOW \
|
|
TCP_PERSIST_TMO \
|
|
TCP_CLAMP_MSS \
|
|
TCP_DEFAULT_BACKLOG_SIZE \
|
|
TCP_KEEP_IDLE \
|
|
TCP_KEEP_INTVL \
|
|
TCP_KEEP_CNT \
|
|
TCP_USE_RFC6528_SECURE_ISN TCP_WUPW
|
|
}
|
|
#endif
|
|
|
|
Component INCLUDE_IPTCPAO_CMD {
|
|
NAME IPTCP tcpao commands
|
|
SYNOPSIS IPTCP Authentication Option commands.
|
|
MODULES iptcp_cmd_ao.o
|
|
LINK_SYMS iptcp_ao_cmd
|
|
REQUIRES INCLUDE_IPCOM INCLUDE_IPNET
|
|
}
|
|
|
|
/******************** Configuration Parameters *****************************/
|
|
/* INCLUDE_IPNET configuration parameters */
|
|
|
|
Parameter IPNET_MEMORY_LIMIT {
|
|
NAME Memory limit
|
|
SYNOPSIS Maximum amount of dynamic memory the stack is allowed to \
|
|
use.
|
|
TYPE uint
|
|
DEFAULT 16777216
|
|
}
|
|
|
|
Parameter IPNET_DST_CACHE_LIMIT {
|
|
NAME Destination cache number limit
|
|
SYNOPSIS Maximum amount of destination cache number the stack is \
|
|
allowed to use. Set to 0 if do not limit(default)
|
|
TYPE uint
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter IPNET_SLAB_DESC_0 {
|
|
NAME Slab cache descriptor 0
|
|
SYNOPSIS Descriptor 0 in the slab cache configuration array. \
|
|
The fields are: \
|
|
mtu - The maximum MTU this buffer can hold. \
|
|
flags - The IPCOM_SLAB_F_xxx flags for this buffer.
|
|
TYPE struct Ipnet_pkt_pool_slab_desc
|
|
DEFAULT IPNET_ETH_MTU, IPCOM_SLAB_F_AVERAGE
|
|
}
|
|
|
|
Parameter IPNET_SLAB_DESC_1 {
|
|
NAME Slab cache descriptor 1
|
|
SYNOPSIS Descriptor 0 in the slab cache configuration array. \
|
|
The fields are: \
|
|
mtu - The maximum MTU this buffer can hold. \
|
|
flags - The IPCOM_SLAB_F_xxx flags for this buffer.
|
|
TYPE struct Ipnet_pkt_pool_slab_desc
|
|
DEFAULT 3000, IPCOM_SLAB_F_FEW
|
|
}
|
|
|
|
Parameter IPNET_SLAB_DESC_2 {
|
|
NAME Slab cache descriptor 2
|
|
SYNOPSIS Descriptor 0 in the slab cache configuration array. \
|
|
The fields are: \
|
|
mtu - The maximum MTU this buffer can hold. \
|
|
flags - The IPCOM_SLAB_F_xxx flags for this buffer.
|
|
TYPE struct Ipnet_pkt_pool_slab_desc
|
|
DEFAULT 10000, IPCOM_SLAB_F_ONE
|
|
}
|
|
|
|
Parameter IPNET_SLAB_DESC_3 {
|
|
NAME Slab cache descriptor 3
|
|
SYNOPSIS Descriptor 0 in the slab cache configuration array. \
|
|
The fields are: \
|
|
mtu - The maximum MTU this buffer can hold. \
|
|
flags - The IPCOM_SLAB_F_xxx flags for this buffer.
|
|
TYPE struct Ipnet_pkt_pool_slab_desc
|
|
DEFAULT IPNET_PKT_POOL_MAX_MTU + 1, IPCOM_SLAB_F_ONE
|
|
}
|
|
|
|
Parameter IPNET_SLAB_DESC_4 {
|
|
NAME Slab cache descriptor 4
|
|
SYNOPSIS Descriptor 0 in the slab cache configuration array. \
|
|
The fields are: \
|
|
mtu - The maximum MTU this buffer can hold. \
|
|
flags - The IPCOM_SLAB_F_xxx flags for this buffer.
|
|
TYPE struct Ipnet_pkt_pool_slab_desc
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter IPNET_SLAB_DESC_5 {
|
|
NAME Slab cache descriptor 5
|
|
SYNOPSIS Descriptor 0 in the slab cache configuration array. \
|
|
The fields are: \
|
|
mtu - The maximum MTU this buffer can hold. \
|
|
flags - The IPCOM_SLAB_F_xxx flags for this buffer.
|
|
TYPE struct Ipnet_pkt_pool_slab_desc
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter IPNET_MAX_REASSEMBLY_LIST_LEN {
|
|
NAME Reassembly list length
|
|
SYNOPSIS Maximum number of partially reassembled fragmentation \
|
|
chains that is allowed to be present at any time. The \
|
|
oldest fragmentation list will be dropped if this this \
|
|
limit is exceeded.
|
|
TYPE uint
|
|
DEFAULT 10
|
|
}
|
|
|
|
Parameter IPNET_MAX_DGRAM_FRAG_LIST_LEN {
|
|
NAME IP-datagram fragment list length
|
|
SYNOPSIS Maximum number of fragments an individual IP-datagram \
|
|
is allowed to consist of. The partly reassembled \
|
|
IP-datagram is dropped if this limit is exceeded.
|
|
TYPE uint
|
|
DEFAULT 100
|
|
}
|
|
|
|
Parameter IPNET_CACHE_BUFSIZE {
|
|
NAME Cache buffer size
|
|
SYNOPSIS Trailing Ipcom_pkt cache buffer to protect dynamic buffer \
|
|
end marks.
|
|
TYPE uint
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter IPNET_MAX_INPUT_PKTS {
|
|
NAME Max input queue length
|
|
SYNOPSIS Defines the maximum number of packets that can be stored \
|
|
in the packet input queue.
|
|
TYPE uint
|
|
DEFAULT 32
|
|
}
|
|
|
|
Parameter IPNET_REASSEMBLY_TIMEOUT {
|
|
NAME Reassembly timeout
|
|
SYNOPSIS Number of seconds IPNET will keep incomplete datagram \
|
|
fragments in the reassembly list before discarding them. \
|
|
RFC2460 states default 60 seconds.
|
|
TYPE uint
|
|
DEFAULT 60
|
|
}
|
|
|
|
/* INCLUDE_IPCOM_USE_INET configuration parameters */
|
|
Parameter INET_MIN_MTU_SIZE {
|
|
NAME Minimum mtu size
|
|
SYNOPSIS The smallest path MTU expected in any route. All Internet \
|
|
routers should be able to handle 576 octets. This value is \
|
|
used by some ICMP messages that include data from the packet \
|
|
that caused an ICMP message to be sent.
|
|
TYPE uint
|
|
DEFAULT 576
|
|
}
|
|
|
|
Parameter INET_BASE_HOP_LIMIT {
|
|
NAME Base hop limit
|
|
SYNOPSIS The default hop limit for IPv4 packets.
|
|
TYPE char *
|
|
DEFAULT "64"
|
|
}
|
|
|
|
Parameter INET_SEND_GRATUITOUS_ARP {
|
|
NAME Gratuitous ARP
|
|
SYNOPSIS Send gratuitous ARP when addresses are added
|
|
TYPE char *
|
|
DEFAULT "yes"
|
|
}
|
|
|
|
Parameter INET_DELETE_ADDR_ON_DUPLICATE_DETECT {
|
|
NAME Delete address on duplicate detect
|
|
SYNOPSIS Automatically remove a configure IPv4 address upon \
|
|
duplicate address detection (gratuitous ARP).
|
|
TYPE char *
|
|
DEFAULT "yes"
|
|
}
|
|
|
|
Parameter INET_MAX_PKTS_PENDING {
|
|
NAME Maximum pending packets
|
|
SYNOPSIS Number of packets that can be waiting for IPv4 to link layer \
|
|
resolution to finish.
|
|
TYPE char *
|
|
DEFAULT "3"
|
|
}
|
|
|
|
Parameter INET_MAX_UNICAST_SOLICIT {
|
|
NAME Maximum unicast solicit
|
|
SYNOPSIS Number of unicast ARP request messages should be sent \
|
|
before starting to use multicast solicits.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_MAX_MULTICAST_SOLICIT {
|
|
NAME Maximum multicast solicit
|
|
SYNOPSIS Number of ARP request messages should be resent before \
|
|
staring to use application probes.
|
|
TYPE char *
|
|
DEFAULT "9"
|
|
}
|
|
|
|
Parameter INET_MAX_APP_SOLICIT {
|
|
NAME Maximum application solicit
|
|
SYNOPSIS Number of resolve message that is sent to routing/netlink \
|
|
sockets if ARP probes failed (or is disabled).
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_BASE_REACHABLE_TIME {
|
|
NAME Base reachable time
|
|
SYNOPSIS Duration, in seconds, that an entry in the ARP cache is \
|
|
in reachable state.
|
|
TYPE char *
|
|
DEFAULT "30"
|
|
}
|
|
|
|
Parameter INET_BASE_RETRANSMIT_TIME {
|
|
NAME Base retransmit time
|
|
SYNOPSIS Number of seconds to wait between retransmits.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_DELAY_FIRST_PROBE_TIME {
|
|
NAME Delay first probe time
|
|
SYNOPSIS Duration, in seconds, to wait for a stale ARP entry to \
|
|
become reachable before forcing a probe, packets will be \
|
|
sent using the stale entry during this time.
|
|
TYPE char *
|
|
DEFAULT "5"
|
|
}
|
|
|
|
Parameter INET_NBR_CACHE_TO_LIVE_TIME {
|
|
NAME Neighbor cache to live
|
|
SYNOPSIS Duration, in seconds, that can pass before a stale entry \
|
|
in the ARP cache is deleted.
|
|
TYPE char *
|
|
DEFAULT "1200"
|
|
}
|
|
|
|
Parameter INET_NBR_MIN_RANDOM_FACTOR {
|
|
NAME Minimum random factor
|
|
SYNOPSIS The minimum value of a random factor.
|
|
TYPE char *
|
|
DEFAULT "50"
|
|
}
|
|
|
|
Parameter INET_NBR_MAX_RANDOM_FACTOR {
|
|
NAME Maximum random factor
|
|
SYNOPSIS The Maximum value of a random factor.
|
|
TYPE char *
|
|
DEFAULT "150"
|
|
}
|
|
|
|
Parameter INET_DISABLE_BROADCAST_FWD {
|
|
NAME Disable forwarding of broadcasts
|
|
SYNOPSIS Set to 1 to disable forwarding of broadcasts.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_DST_CACHE_TO_LIVE_TIME {
|
|
NAME Destination cache to live
|
|
SYNOPSIS Duration, in seconds, that can pass before an entry in the \
|
|
destination cache is deleted, this lifetime is used by on \
|
|
entries created as a response to redirect and need frag \
|
|
ICMP messages.
|
|
TYPE char *
|
|
DEFAULT "600"
|
|
}
|
|
|
|
Parameter INET_ICMP_RATE_LIMIT_BUCKET_SIZE {
|
|
NAME ICMP rate limit bucket size
|
|
SYNOPSIS The number of ICMP messages the stack is allowed to per \
|
|
ICMP Ratelimit Interval millisecond interval.
|
|
TYPE char *
|
|
DEFAULT "100"
|
|
}
|
|
|
|
Parameter INET_ICMP_RATE_LIMIT_INTERVAL {
|
|
NAME ICMP rate limit interval
|
|
SYNOPSIS ICMP Ratelimit Interval millisecond interval.
|
|
TYPE char *
|
|
DEFAULT "1000"
|
|
}
|
|
|
|
Parameter INET_ICMP_REDIRECT_SEND {
|
|
NAME ICMP redirect send
|
|
SYNOPSIS Set to 2 if a redirect should be sent and the original \
|
|
message should be forwarded (default). \
|
|
Set to 1 if a redirect should be sent but the original \
|
|
message should be discarded. \
|
|
Set to 0 if no redirect should be sent but the original \
|
|
message should be forwarded. \
|
|
Set to -1 if no redirect should be sent and the original \
|
|
message should be discarded.
|
|
TYPE char *
|
|
DEFAULT "2"
|
|
}
|
|
|
|
Parameter INET_ICMP_REDIRECT_RECEIVE {
|
|
NAME ICMP redirect receive
|
|
SYNOPSIS Set to != 0 if redirect messages should be accepted and \
|
|
processed.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_ICMP_IGNORE_ECHO_REQ {
|
|
NAME ICMP ignore echo request
|
|
SYNOPSIS Set to 0 if the stack should answer to echo requests
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter INET_ICMP_IGNORE_TIMESTAMP_REQ {
|
|
NAME ICMP ignore timestamp request
|
|
SYNOPSIS Set to 0 if the stack should answer to timestamp requests.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter INET_ICMP_SEND_TIME_EXCEEDED {
|
|
NAME ICMP send time exceeded
|
|
SYNOPSIS Set to != 0 if the stack should send time exceeded messages.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_ICMP_SEND_DST_UNREACHABLE {
|
|
NAME ICMP send destination unreachable
|
|
SYNOPSIS Set to != 0 if the stack should send destination unreachable.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_ICMP_IGNORE_BROADCAST {
|
|
NAME ICMP ignore broadcast
|
|
SYNOPSIS Set to 1 if stack should ignore icmp requests from broadcast addresses.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_UDP_CHECKSUM {
|
|
NAME UDP checksum for IPv4
|
|
SYNOPSIS Set to 0 to disable UDP checksum for IPv4.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_RANDOM_IP_ID {
|
|
NAME Random IP ID for IPv4
|
|
SYNOPSIS Set this parameter to 1 to enable random IP ID for IPv4.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
/* INCLUDE_IPCOM_USE_INET6 configuration parameters */
|
|
Parameter INET6_MIN_MTU_SIZE {
|
|
NAME Minimum mtu size
|
|
SYNOPSIS The smallest path MTU expected in any route. All Internet \
|
|
routers should be able to handle 1280 octets. This value is \
|
|
used by some ICMP messages that include data from the packet \
|
|
that caused an ICMP message to be sent.
|
|
TYPE uint
|
|
DEFAULT 1280
|
|
}
|
|
|
|
Parameter INET6_BASE_HOP_LIMIT {
|
|
NAME Base hop limit
|
|
SYNOPSIS The default hop limit for IPv6 packets.
|
|
TYPE char *
|
|
DEFAULT "64"
|
|
}
|
|
|
|
Parameter INET6_MAX_PKTS_PENDING {
|
|
NAME Maximum pending packets
|
|
SYNOPSIS Number of packets that can be waiting for IPv6 to link layer \
|
|
resolution to finish.
|
|
TYPE char *
|
|
DEFAULT "3"
|
|
}
|
|
|
|
Parameter INET6_MAX_UNICAST_SOLICIT {
|
|
NAME Maximum unicast solicit
|
|
SYNOPSIS Number of unicast neighbor discovery messages should be \
|
|
sent for ND entry update before starting to use multicast \
|
|
solicit.
|
|
TYPE char *
|
|
DEFAULT "3"
|
|
}
|
|
|
|
Parameter INET6_MAX_MULTICAST_SOLICIT {
|
|
NAME Maximum multicast solicit
|
|
SYNOPSIS Number of neighbor discovery messages should be resent \
|
|
before staring to use application solicit. Setting this \
|
|
to non-zero will cause IPv6 ready tests to fail, so change \
|
|
it only if you know what you are doing.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter INET6_MAX_APP_SOLICIT {
|
|
NAME Maximum application solicit
|
|
SYNOPSIS Number of resolve message that is sent to routing/netlink \
|
|
sockets if ND probes failed (or is disabled).
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_DAD_TRANSMITS {
|
|
NAME Number of duplicate address detection transmits
|
|
SYNOPSIS Number of times the node should test the address for \
|
|
uniqueness before assigning it to the interface (set to 0 \
|
|
to turn of Duplicate Address Detection).
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_BASE_REACHABLE_TIME {
|
|
NAME Base reachable time
|
|
SYNOPSIS Duration, in seconds, that an entry in the NDP cache is \
|
|
in reachable state.
|
|
TYPE char *
|
|
DEFAULT "30"
|
|
}
|
|
|
|
Parameter INET6_BASE_RETRANSMIT_TIME {
|
|
NAME Base retransmit time
|
|
SYNOPSIS Number of seconds to wait between retransmits.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_DELAY_FIRST_PROBE_TIME {
|
|
NAME Delay first probe time
|
|
SYNOPSIS Duration, in seconds, to wait for a stale ND entry to \
|
|
become reachable before forcing a probe, packets will be \
|
|
sent using the stale entry during this time.
|
|
TYPE char *
|
|
DEFAULT "5"
|
|
}
|
|
|
|
Parameter INET6_NBR_CACHE_TO_LIVE_TIME {
|
|
NAME Neighbor cache to live
|
|
SYNOPSIS Duration, in seconds, that can pass before a stale entry \
|
|
in the neighbor cache is deleted.
|
|
TYPE char *
|
|
DEFAULT "1200"
|
|
}
|
|
|
|
Parameter INET6_DST_CACHE_TO_LIVE_TIME {
|
|
NAME Destination cache to live
|
|
SYNOPSIS Duration, in seconds, that can pass before an entry in the \
|
|
destination cache is deleted, this lifetime is used by on \
|
|
entries created as a response to redirect and need frag \
|
|
ICMP messages.
|
|
TYPE char *
|
|
DEFAULT "600"
|
|
}
|
|
|
|
Parameter INET6_ROUTER_LIFETIME {
|
|
NAME Router lifetime
|
|
SYNOPSIS The number of seconds this router can be used as gateway \
|
|
after a router advertisement had been sent, only used when \
|
|
configured as a router.
|
|
TYPE char *
|
|
DEFAULT "1800"
|
|
}
|
|
|
|
Parameter INET6_ICMP_RATE_LIMIT_BUCKET_SIZE {
|
|
NAME ICMP rate limit bucket size
|
|
SYNOPSIS The number of ICMPv6 messages the stack is allowed to per \
|
|
ICMP Ratelimit Interval millisecond interval.
|
|
TYPE char *
|
|
DEFAULT "100"
|
|
}
|
|
|
|
Parameter INET6_ICMP_RATE_LIMIT_INTERVAL {
|
|
NAME ICMP rate limit interval
|
|
SYNOPSIS ICMP Ratelimit Interval millisecond interval. Set to 0 to \
|
|
disable the rate limiter.
|
|
TYPE char *
|
|
DEFAULT "1000"
|
|
}
|
|
|
|
Parameter INET6_ICMP_REDIRECT_SEND {
|
|
NAME ICMP redirect send
|
|
SYNOPSIS Set to 2 if a redirect should be sent and the original \
|
|
message should be forwarded (default). \
|
|
Set to 1 if a redirect should be sent but the original \
|
|
message should be discarded. \
|
|
Set to 0 if no redirect should be sent but the original \
|
|
message should be forwarded. \
|
|
Set to -1 if no redirect should be sent and the original \
|
|
message should be discarded.
|
|
TYPE char *
|
|
DEFAULT "2"
|
|
}
|
|
|
|
Parameter INET6_ICMP_REDIRECT_RECEIVE {
|
|
NAME ICMP redirect receive
|
|
SYNOPSIS Set to != 0 if redirect messages should be accepted and \
|
|
processed.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_ICMP_IGNORE_ECHO_REQ {
|
|
NAME ICMP ignore echo request
|
|
SYNOPSIS Set to 0 if the stack should answer to echo requests
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter INET6_ICMP_SEND_TIME_EXCEEDED {
|
|
NAME ICMP send time exceeded
|
|
SYNOPSIS Set to != 0 if the stack should send time exceeded messages.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_ICMP_SEND_DST_UNREACHABLE {
|
|
NAME ICMP send destination unreachable
|
|
SYNOPSIS Set to != 0 if the stack should send destination unreachable.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_ACCEPT_RTADV {
|
|
NAME Accept router advertisements message
|
|
SYNOPSIS Enable/disable processing of router advertisements message.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_AUTO_CONFIG {
|
|
NAME Auto configure IPv6 address
|
|
SYNOPSIS Enable/disable address auto configuration.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_ADD_AUTONOMOUS_ADDR {
|
|
NAME Add autonomous address
|
|
SYNOPSIS Should this node create addresses from router advertisement messages.
|
|
TYPE char *
|
|
DEFAULT "yes"
|
|
}
|
|
|
|
Parameter INET6_RTHDR0 {
|
|
NAME Routing header type processing
|
|
SYNOPSIS Enable/disable processing of routing header type 0 \
|
|
It is disabled by default since its a potential \
|
|
security problem
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
/* INCLUDE_IPNET6_AUTOCONF_PRIVACY_EXT configuration parameters */
|
|
|
|
/*
|
|
* The following configuration parameters support RFC3041, Privacy Extensions
|
|
* for Stateless Address Autoconfiguration in IPv6. These configuration
|
|
* parameters are only meaningful if IPNET is compiled with the
|
|
* IPNET_USE_RFC3401 directive.
|
|
*/
|
|
|
|
Parameter INET6_ENABLE_PRIVACY_EXTENSONS {
|
|
NAME Enable privacy extensions
|
|
SYNOPSIS Enable/disable privacy extensions.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET6_TEMP_VALID_LIFETIME {
|
|
NAME Maximum lifetime
|
|
SYNOPSIS Maximum lifetime, in seconds, of temporary addresses. Default \
|
|
is 1 week.
|
|
TYPE char *
|
|
DEFAULT "604800"
|
|
}
|
|
|
|
Parameter INET6_TEMP_PREFERRED_LIFETIME {
|
|
NAME Maximum preferred time
|
|
SYNOPSIS Maximum preferred time, in seconds, of temporary addresses. \
|
|
Default is 1 day.
|
|
TYPE char *
|
|
DEFAULT "86400"
|
|
}
|
|
|
|
Parameter INET6_REGEN_ADVANCE {
|
|
NAME Expired time
|
|
SYNOPSIS Number of seconds before the current temporary address goes \
|
|
non-preferred, that a new address will be generated. \
|
|
Default is 5 seconds by RFC, but that is very tight so \
|
|
30 seconds is used instead.
|
|
TYPE char *
|
|
DEFAULT "30"
|
|
}
|
|
|
|
/* INCLUDE_IPNET6_PRIVACY_INTERFACE_CONFIGS configuration parameters */
|
|
Parameter INET6_IFLIST_ENABLE_PRIVACY_EXTENSONS {
|
|
NAME Enable privacy extensions
|
|
SYNOPSIS Enable/disable privacy extensions. This parameter can be \
|
|
configure on a per-interface basis in the form of \
|
|
"<ifparam>=<value>". Each pair of "<ifparam>=<value>" is \
|
|
semicolon separated. E.g, "eth0=1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter INET6_IFLIST_TEMP_VALID_LIFETIME {
|
|
NAME Maximum lifetime
|
|
SYNOPSIS Maximum lifetime, in seconds, of temporary addresses. Default \
|
|
is 1 week. This parameter can be configure on a per-interface \
|
|
basis in the form of "<ifparam>=<value>". Each pair of \
|
|
"<ifparam>=<value>" is semicolon separated. E.g, "eth0=604800".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter INET6_IFLIST_TEMP_PREFERRED_LIFETIME {
|
|
NAME Maximum preferred time
|
|
SYNOPSIS Maximum preferred time, in seconds, of temporary addresses. \
|
|
Default is 1 day. This parameter can be configure on a \
|
|
per-interface basis in the form of "<ifparam>=<value>". \
|
|
Each pair of "<ifparam>=<value>" is semicolon separated. \
|
|
E.g, "eth0=86400".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter INET6_IFLIST_REGEN_ADVANCE {
|
|
NAME Expired time
|
|
SYNOPSIS Number of seconds before the current temporary address goes \
|
|
non-preferred, that a new address will be generated. \
|
|
Default is 5 seconds by RFC, but that is very tight so \
|
|
30 seconds is used instead. This parameter can be configure \
|
|
on a per-interface basis in the form of "<ifparam>=<value>". \
|
|
Each pair of "<ifparam>=<value>" is semicolon separated. \
|
|
E.g, "eth0=30".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
/* INCLUDE_IPNET_USE_NAT configuration parameters */
|
|
Parameter IPNAT_ICMP_MAPPING_TIMEOUT {
|
|
NAME icmp mapping timeout
|
|
SYNOPSIS Specifies the timeout in seconds until an icmp mapping \
|
|
expires.
|
|
TYPE char *
|
|
DEFAULT "10"
|
|
}
|
|
|
|
Parameter IPNAT_UDP_MAPPING_TIMEOUT {
|
|
NAME udp mapping timeout
|
|
SYNOPSIS Specifies the timeout in seconds until an udp mapping \
|
|
expires.
|
|
TYPE char *
|
|
DEFAULT "60"
|
|
}
|
|
|
|
Parameter IPNAT_TCP_MAPPING_TIMEOUT {
|
|
NAME tcp mapping timeout
|
|
SYNOPSIS Specifies the timeout in seconds until a tcp mapping \
|
|
expires.
|
|
TYPE char *
|
|
DEFAULT "432000"
|
|
}
|
|
|
|
Parameter IPNAT_OTHER_MAPPING_TIMEOUT {
|
|
NAME other mapping timeout
|
|
SYNOPSIS Specifies the timeout in seconds until other mappings \
|
|
expires.
|
|
TYPE char *
|
|
DEFAULT "60"
|
|
}
|
|
|
|
Parameter IPNAT_MAX_MAPPING {
|
|
NAME max active mapping
|
|
SYNOPSIS The maximum number of active NAT mappings.
|
|
TYPE char *
|
|
DEFAULT "1000"
|
|
}
|
|
|
|
Parameter IPNAT_AUTOPORT_START_INTERVAL {
|
|
NAME auto port start interval
|
|
SYNOPSIS Start of the automatically NATed ports interval.
|
|
TYPE char *
|
|
DEFAULT "29000"
|
|
}
|
|
|
|
Parameter IPNAT_AUTOPORT_END_INTERVAL {
|
|
NAME auto port end interval
|
|
SYNOPSIS End of the automatically NATed ports interval.
|
|
TYPE char *
|
|
DEFAULT "29999"
|
|
}
|
|
|
|
/* INCLUDE_IPTCP configuration parameters */
|
|
#ifndef _WRS_CONFIG_COMPONENT_IPLITE
|
|
Parameter TCP_CONN_TIMEOUT {
|
|
NAME Connection timeout
|
|
SYNOPSIS Define the number of seconds IPNET will try to create a TCP \
|
|
connection before giving up.
|
|
TYPE int
|
|
DEFAULT 75
|
|
}
|
|
|
|
Parameter TCP_MAX_RETRANSMITS {
|
|
NAME Max retransmits
|
|
SYNOPSIS Maximum number of times a TCP segment will be resent before \
|
|
giving up with an IPTCP_ERRNO_ETIMEDOUT error. Exponential \
|
|
back off is applied before each resend (max time between \
|
|
two resends is 1 minute).
|
|
TYPE int
|
|
DEFAULT 10
|
|
}
|
|
|
|
Parameter IPTCP_MAX_RETRAMSMITS_IN_TRANSIENT {
|
|
NAME Max retransmits transient states
|
|
SYNOPSIS Defines the maximum number of resend attempts to use when \
|
|
the number of sessions in the transient state exceeds the \
|
|
transient threshold set with iptcp.TransientTresh.
|
|
TYPE int
|
|
DEFAULT 2
|
|
}
|
|
|
|
Parameter IPTCP_MAX_TRANSIENT {
|
|
NAME Max transient
|
|
SYNOPSIS Defines the maximum number of sessions that can be in a \
|
|
transient state. Once the value is reached, the session with \
|
|
the longest transient state period is dropped and the session \
|
|
is set to the CLOSED state. The session is then removed from \
|
|
the list of sessions in a transient state.
|
|
TYPE int
|
|
DEFAULT 20
|
|
}
|
|
|
|
Parameter IPTCP_TRANSIENT_THRESH {
|
|
NAME Transient tresh
|
|
SYNOPSIS This threshold refers to the number of sessions in a transient \
|
|
state. When this threshold is exceeded, the number of resend \
|
|
attempts is reduced to a value set by \
|
|
iptcp.MaxRetransmitsTransientStates.
|
|
TYPE int
|
|
DEFAULT 5
|
|
}
|
|
|
|
Parameter TCP_MSL {
|
|
NAME Maximum segment lifetime
|
|
SYNOPSIS TCP sockets that enter the TIME_WAIT state will be in that \
|
|
state for 2 times this value. Should be 120 sec (2 min) \
|
|
according to RFC 793, but most TCP/IP stacks sets this \
|
|
value to 30 seconds.
|
|
TYPE int
|
|
DEFAULT 30
|
|
}
|
|
|
|
Parameter TCP_WUPW {
|
|
NAME Maximum waiting time of the receiver update its window size
|
|
SYNOPSIS If the tcp receiver never announces a window greater than \
|
|
MSS, the sender won't want to send anything smaller to \
|
|
avoid silly window syndrome. This value is the maximum \
|
|
waiting time in milliseconds of the receiver update its \
|
|
window size. If it is timeout, just send the data anyway \
|
|
to make forward progress.
|
|
TYPE int
|
|
DEFAULT 300
|
|
}
|
|
|
|
Parameter TCP_MAX_MSS {
|
|
NAME Maximum segment size
|
|
SYNOPSIS Defines the largest Maximum Segment Size that TCP will \
|
|
ever suggest. The actual MSS suggested might be smaller \
|
|
than this number if depending on MTU for the interface. \
|
|
Set to 0 if the largest MSS allowed by the MTU should be used.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_USE_TIMESTAMP {
|
|
NAME Use Timestamp
|
|
SYNOPSIS Determines if the Timestamp option should be included \
|
|
in all segments for peers that support it. Set to 0 if the \
|
|
Timestamp option should never be used.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_USE_RFC1122_URGENT_DATA {
|
|
NAME Use RFC1122 urgent data
|
|
SYNOPSIS Set to "1" to use urgent data as described in RFC 1122. \
|
|
Set to "0" to use urgent data as described in RFC 793. \
|
|
Should be set to 0 since that is how most stacks works, \
|
|
must be set to 1 in order successfully pass Ixia ANVL \
|
|
TCP-CORE group 19 tests.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_SEGMENT_MULTIPLIER {
|
|
NAME Segment size multiplier
|
|
SYNOPSIS The size multiplier that will be used on outgoing \
|
|
segments when the outgoing interface support TCP \
|
|
Segmentation Offload. Higher value will generally give \
|
|
better performance, but any factor higher than 2 is not \
|
|
guaranteed to work on all network cards.
|
|
TYPE int
|
|
DEFAULT 2
|
|
}
|
|
|
|
Parameter TCP_LAND_ATTACK_PROTECTION {
|
|
NAME Enable/disable LAND attack protection on TCP
|
|
SYNOPSIS Set to 1 to prevent LAND attacks on TCP implementation.
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
|
|
Parameter TCP_ALLOW_ZERO_WINDOW
|
|
{
|
|
NAME Allow zero window
|
|
SYNOPSIS Enable/disable acceptance of the peer window being set \
|
|
to zero in the ACK of the SYN/ACK. An attacker can use \
|
|
zero window to keep the node in persist time for a long \
|
|
time.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_ALLOW_TINY_WINDOW
|
|
{
|
|
NAME Allow tiny window
|
|
SYNOPSIS Enable/disable acceptance of the peer window being set \
|
|
to a value less that one MSS in the ACK of the SYN/ACK. \
|
|
An attacker can use zero window to keep the node in \
|
|
persist time for a long. Enabling can sometimes cause \
|
|
cause connection trouble in environments that contains \
|
|
traffic shapers which modifies the peer windows of TCP \
|
|
segments. This is why this is allowed by default.
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
|
|
Parameter TCP_PERSIST_TMO
|
|
{
|
|
NAME Persist probe timeout
|
|
SYNOPSIS The maximum duration, in seconds, a peer can keep \
|
|
announcing a receive window of size zero. \
|
|
Default value is "0" which means "infinite".
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_CLAMP_MSS
|
|
{
|
|
NAME Clamp MSS for session that goes through a gateway
|
|
SYNOPSIS The maximum MSS that will be used for TCP sessions \
|
|
to nodes that is not link local. \
|
|
Default value is 0 which means that path MTU \
|
|
will be used to calculate the MSS.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_DEFAULT_BACKLOG_SIZE
|
|
{
|
|
NAME Size of the default listen backlog
|
|
SYNOPSIS Default backlock size, this is the value that will \
|
|
be used when 0 is passed and the 2:nd argument to \
|
|
listen().
|
|
TYPE int
|
|
DEFAULT 5
|
|
}
|
|
|
|
Parameter TCP_KEEP_IDLE
|
|
{
|
|
NAME Keep alive idle time
|
|
SYNOPSIS The default time a TCP connection must be idle \
|
|
before the first keep-alive packet is sent (in seconds).
|
|
TYPE int
|
|
DEFAULT 7200
|
|
}
|
|
|
|
Parameter TCP_KEEP_INTVL
|
|
{
|
|
NAME Keep alive interval
|
|
SYNOPSIS The time between each keep-alive probe.
|
|
TYPE int
|
|
DEFAULT 75
|
|
}
|
|
|
|
Parameter TCP_KEEP_CNT
|
|
{
|
|
NAME Number of keep alive packets
|
|
SYNOPSIS Number of unsuccessful keep-alive probes \
|
|
that will be sent before dropping the connection.
|
|
TYPE int
|
|
DEFAULT 10
|
|
}
|
|
|
|
Parameter TCP_USE_RFC6528_SECURE_ISN
|
|
{
|
|
NAME Use RFC6528 secure Initial Sequence Number
|
|
SYNOPSIS The secure ISN described in RFC6528 will be used in TCP three-way handshake,\
|
|
which will mitigate sequence number guessing attacks.\
|
|
Set to "1" to use secure ISN, otherwise, set to "0".
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
|
|
Parameter TCP_DELAY_ACK_TIME {
|
|
NAME Delay ACK time
|
|
SYNOPSIS Define the number of milliseconds reciever will reply to peer with \
|
|
a delay ACK.
|
|
TYPE int
|
|
DEFAULT 200
|
|
}
|
|
|
|
Parameter TCP_IMMEDIATE_ACK_FOR_PSH {
|
|
NAME Immediate ACK for PSH
|
|
SYNOPSIS Set to 1 to reply a ACK immediately for PSH.
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
#endif /* !_WRS_CONFIG_COMPONENT_IPLITE */
|