319 lines
10 KiB
Mathematica
319 lines
10 KiB
Mathematica
/* 00comp_iplite_protos.cdf - IPLite Protocols Component configuration file */
|
|
|
|
/*
|
|
* Copyright (c) 2006-2007 Wind River Systems, Inc.
|
|
*
|
|
* The right to copy, distribute or otherwise make use of this software
|
|
* may be licensed only pursuant to the terms of an applicable Wind River
|
|
* license agreement. No license to Wind River intellectual property rights
|
|
* is granted herein. All rights not licensed by Wind River are reserved
|
|
* by Wind River.
|
|
*/
|
|
|
|
/*
|
|
modification history
|
|
--------------------
|
|
01b,01mar13,xhs Fix WIND00405569, adding some missed parameters.
|
|
01a,31aug10,xhs created
|
|
*/
|
|
|
|
#ifdef _WRS_CONFIG_COMPONENT_IPLITE
|
|
|
|
Component INCLUDE_IPLITE {
|
|
NAME IPLITE
|
|
SYNOPSIS IPLITE
|
|
REQUIRES INCLUDE_IPCOM
|
|
MODULES iplite.o
|
|
CONFIGLETTES iplite_config.c
|
|
}
|
|
|
|
Component INCLUDE_IPAIP {
|
|
NAME IPv4 AutoIP
|
|
SYNOPSIS Auto IPv4 Address configuration. This requires the IPLite \
|
|
stack to be compiled with the IPLITE_USE_RFC3927 directive.
|
|
REQUIRES INCLUDE_IPLITE INCLUDE_IPCOM_USE_ETHERNET
|
|
CFG_PARAMS INET_IPAIP_IFNAME_LIST
|
|
}
|
|
|
|
Selection SELECT_IPAIP_CONFIG {
|
|
NAME IPv4 AutoIP configurations
|
|
SYNOPSIS IPv4 AutoIP configurations
|
|
COUNT 1-
|
|
CHILDREN INCLUDE_IPAIP_GLOBAL_CONFIGS
|
|
DEFAULTS INCLUDE_IPAIP_GLOBAL_CONFIGS
|
|
}
|
|
|
|
Component INCLUDE_IPAIP_GLOBAL_CONFIGS {
|
|
NAME Global configurations
|
|
SYNOPSIS Global IPv4 AutoIP configurations
|
|
REQUIRES INCLUDE_IPAIP
|
|
CFG_PARAMS INET_IPAIP_PROBE_WAIT INET_IPAIP_PROBE_NUM \
|
|
INET_IPAIP_PROBE_MIN INET_IPAIP_PROBE_MAX \
|
|
INET_IPAIP_ANNOUNCE_WAIT INET_IPAIP_ANNOUNCE_NUM \
|
|
INET_IPAIP_ANNOUNCE_INTERVAL \
|
|
INET_IPAIP_MAX_CONFLICTS \
|
|
INET_IPAIP_RATE_LIMIT_INTERVAL \
|
|
INET_IPAIP_DEFEND_INTERVAL
|
|
}
|
|
|
|
/******************** Configuration Parameters *****************************/
|
|
|
|
/* INCLUDE_IPAIP configuration parameters */
|
|
Parameter INET_IPAIP_IFNAME_LIST {
|
|
NAME autoIP interface list
|
|
SYNOPSIS A space-separated list of interfaces that can configure \
|
|
a link-local IPv4, e.g. "eth0 eth1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
/* INCLUDE_IPAIP_GLOBAL_CONFIGS configuration parameters */
|
|
|
|
/*
|
|
* The following configuration parameters support RFC3927, Dynamic
|
|
* Configuration of IPv4 Link-Local Addresses. These configuration
|
|
* parameters are only meaningful if IPLITE is compiled with the
|
|
* IPLITE_USE_RFC3927 directive.
|
|
*/
|
|
|
|
Parameter INET_IPAIP_PROBE_WAIT {
|
|
NAME autoIP probe wait time
|
|
SYNOPSIS Time (in seconds) the host will wait before creating a link \
|
|
local IPv4 and start checking it for uniqueness.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_IPAIP_PROBE_NUM {
|
|
NAME autoIP probe count
|
|
SYNOPSIS Number of times a link local address is checked for uniqness \
|
|
before being assigned
|
|
TYPE char *
|
|
DEFAULT "3"
|
|
}
|
|
|
|
Parameter INET_IPAIP_PROBE_MIN {
|
|
NAME autoIP min probe time
|
|
SYNOPSIS The minimum time (in seconds) where the next probe is sent.
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter INET_IPAIP_PROBE_MAX {
|
|
NAME autoIP max probe time
|
|
SYNOPSIS The maximum time (in seconds) where the next probe is sent.
|
|
TYPE char *
|
|
DEFAULT "3"
|
|
}
|
|
|
|
Parameter INET_IPAIP_ANNOUNCE_WAIT {
|
|
NAME autoIP announce wait time
|
|
SYNOPSIS The time to wait (in seconds) before the assigned IPv4 \
|
|
address is announced.
|
|
TYPE char *
|
|
DEFAULT "2"
|
|
}
|
|
|
|
Parameter INET_IPAIP_ANNOUNCE_NUM {
|
|
NAME autoIP number of announcements
|
|
SYNOPSIS The number of announcements to send
|
|
TYPE char *
|
|
DEFAULT "2"
|
|
}
|
|
|
|
Parameter INET_IPAIP_ANNOUNCE_INTERVAL {
|
|
NAME autoIP announcements interval
|
|
SYNOPSIS The number of seconds between announcements
|
|
TYPE char *
|
|
DEFAULT "2"
|
|
}
|
|
|
|
Parameter INET_IPAIP_MAX_CONFLICTS {
|
|
NAME autoIP max conflicts
|
|
SYNOPSIS Max conflicts before rate limiting
|
|
TYPE char *
|
|
DEFAULT "10"
|
|
}
|
|
|
|
Parameter INET_IPAIP_RATE_LIMIT_INTERVAL {
|
|
NAME autoIP rate limit interval
|
|
SYNOPSIS Delay between consecutive attempts
|
|
TYPE char *
|
|
DEFAULT "60"
|
|
}
|
|
|
|
Parameter INET_IPAIP_DEFEND_INTERVAL {
|
|
NAME autoIP defensive interval
|
|
SYNOPSIS minimum interval between defensive ARPs
|
|
TYPE char *
|
|
DEFAULT "10"
|
|
}
|
|
|
|
Component INCLUDE_IPTCP {
|
|
NAME TCP
|
|
SYNOPSIS Transmission Control Protocol
|
|
REQUIRES INCLUDE_IPCOM INCLUDE_IPLITE
|
|
MODULES iplite_tcp.o
|
|
CFG_PARAMS TCP_CONN_TIMEOUT TCP_MAX_RETRANSMITS TCP_MSL \
|
|
IPTCP_MAX_RETRAMSMITS_IN_TRANSIENT \
|
|
IPTCP_MAX_TRANSIENT IPTCP_TRANSIENT_THRESH \
|
|
TCP_MAX_MSS TCP_USE_TIMESTAMP \
|
|
TCP_USE_RFC1122_URGENT_DATA \
|
|
TCP_LAND_ATTACK_PROTECTION \
|
|
TCP_ALLOW_ZERO_WINDOW \
|
|
TCP_ALLOW_TINY_WINDOW \
|
|
TCP_KEEP_IDLE \
|
|
TCP_KEEP_INTVL \
|
|
TCP_KEEP_CNT
|
|
}
|
|
|
|
/* INCLUDE_IPTCP configuration parameters */
|
|
Parameter TCP_CONN_TIMEOUT {
|
|
NAME Connection timeout
|
|
SYNOPSIS Define the number of seconds IPNET will try to create a TCP \
|
|
connection before giving up.
|
|
TYPE int
|
|
DEFAULT 75
|
|
}
|
|
|
|
Parameter TCP_MAX_RETRANSMITS {
|
|
NAME Max retransmits
|
|
SYNOPSIS Maximum number of times a TCP segment will be resent before \
|
|
giving up with an IPTCP_ERRNO_ETIMEDOUT error. Exponential \
|
|
back off is applied before each resend (max time between \
|
|
two resends is 1 minute).
|
|
TYPE int
|
|
DEFAULT 10
|
|
}
|
|
|
|
Parameter IPTCP_MAX_RETRAMSMITS_IN_TRANSIENT {
|
|
NAME Max retransmits transient states
|
|
SYNOPSIS Defines the maximum number of resend attempts to use when \
|
|
the number of sessions in the transient state exceeds the \
|
|
transient threshold set with iptcp.TransientTresh.
|
|
TYPE int
|
|
DEFAULT 2
|
|
}
|
|
|
|
Parameter IPTCP_MAX_TRANSIENT {
|
|
NAME Max transient
|
|
SYNOPSIS Defines the maximum number of sessions that can be in a \
|
|
transient state. Once the value is reached, the session with \
|
|
the longest transient state period is dropped and the session \
|
|
is set to the CLOSED state. The session is then removed from \
|
|
the list of sessions in a transient state.
|
|
TYPE int
|
|
DEFAULT 20
|
|
}
|
|
|
|
Parameter IPTCP_TRANSIENT_THRESH {
|
|
NAME Transient tresh
|
|
SYNOPSIS This threshold refers to the number of sessions in a transient \
|
|
state. When this threshold is exceeded, the number of resend \
|
|
attempts is reduced to a value set by \
|
|
iptcp.MaxRetransmitsTransientStates.
|
|
TYPE int
|
|
DEFAULT 5
|
|
}
|
|
|
|
Parameter TCP_MSL {
|
|
NAME Maximum segment lifetime
|
|
SYNOPSIS TCP sockets that enter the TIME_WAIT state will be in that \
|
|
state for 2 times this value. Should be 120 sec (2 min) \
|
|
according to RFC 793, but most TCP/IP stacks sets this \
|
|
value to 30 seconds.
|
|
TYPE int
|
|
DEFAULT 30
|
|
}
|
|
|
|
Parameter TCP_MAX_MSS {
|
|
NAME Maximum segment size
|
|
SYNOPSIS Defines the largest Maximum Segment Size that TCP will \
|
|
ever suggest. The actual MSS suggested might be smaller \
|
|
than this number if depending on MTU for the interface. \
|
|
Set to 0 if the largest MSS allowed by the MTU should be used.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_USE_TIMESTAMP {
|
|
NAME Use Timestamp
|
|
SYNOPSIS Determines if the Timestamp option should be included \
|
|
in all segments for peers that support it. Set to 0 if the \
|
|
Timestamp option should never be used.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_USE_RFC1122_URGENT_DATA {
|
|
NAME Use RFC1122 urgent data
|
|
SYNOPSIS Set to "1" to use urgent data as described in RFC 1122. \
|
|
Set to "0" to use urgent data as described in RFC 793. \
|
|
Should be set to 0 since that is how most stacks works, \
|
|
must be set to 1 in order successfully pass Ixia ANVL \
|
|
TCP-CORE group 19 tests.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_LAND_ATTACK_PROTECTION {
|
|
NAME Enable/disable LAND attack protection on TCP
|
|
SYNOPSIS Set to 1 to prevent LAND attacks on TCP implementation.
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
|
|
Parameter TCP_ALLOW_ZERO_WINDOW
|
|
{
|
|
NAME Allow zero window
|
|
SYNOPSIS Enable/disable acceptance of the peer window being set \
|
|
to zero in the ACK of the SYN/ACK. An attacker can use \
|
|
zero window to keep the node in persist time for a long \
|
|
time.
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter TCP_ALLOW_TINY_WINDOW
|
|
{
|
|
NAME Allow tiny window
|
|
SYNOPSIS Enable/disable acceptance of the peer window being set \
|
|
to a value less that one MSS in the ACK of the SYN/ACK. \
|
|
An attacker can use zero window to keep the node in \
|
|
persist time for a long. Enabling can sometimes cause \
|
|
cause connection trouble in environments that contains \
|
|
traffic shapers which modifies the peer windows of TCP \
|
|
segments. This is why this is allowed by default.
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
|
|
Parameter TCP_KEEP_IDLE
|
|
{
|
|
NAME Keep alive idle time
|
|
SYNOPSIS The default time a TCP connection must be idle \
|
|
before the first keep-alive packet is sent (in seconds).
|
|
TYPE int
|
|
DEFAULT 7200
|
|
}
|
|
|
|
Parameter TCP_KEEP_INTVL
|
|
{
|
|
NAME Keep alive interval
|
|
SYNOPSIS The time between each keep-alive probe.
|
|
TYPE int
|
|
DEFAULT 75
|
|
}
|
|
|
|
Parameter TCP_KEEP_CNT
|
|
{
|
|
NAME Number of keep alive packets
|
|
SYNOPSIS Number of unsuccessful keep-alive probes \
|
|
that will be sent before dropping the connection.
|
|
TYPE int
|
|
DEFAULT 10
|
|
}
|
|
|
|
#endif
|
|
|