Return to kernel-netlink.conf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins

Annotation of embedaddon/strongswan/conf/plugins/kernel-netlink.conf, revision 1.1

1.1     ! misho       1: kernel-netlink {
        !             2: 
        !             3:     # Buffer size for received Netlink messages.
        !             4:     # buflen = <min(PAGE_SIZE, 8192)>
        !             5: 
        !             6:     # Force maximum Netlink receive buffer on Netlink socket.
        !             7:     # force_receive_buffer_size = no
        !             8: 
        !             9:     # Firewall mark to set on the routing rule that directs traffic to our
        !            10:     # routing table.
        !            11:     # fwmark =
        !            12: 
        !            13:     # Interface to be used to find hardware offload feature flag on.
        !            14:     # hw_offload_feature_interface = lo
        !            15: 
        !            16:     # Whether to ignore errors potentially resulting from a retransmission.
        !            17:     # ignore_retransmit_errors = no
        !            18: 
        !            19:     # Whether to load the plugin. Can also be an integer to increase the
        !            20:     # priority of this plugin.
        !            21:     load = yes
        !            22: 
        !            23:     # MSS to set on installed routes, 0 to disable.
        !            24:     # mss = 0
        !            25: 
        !            26:     # MTU to set on installed routes, 0 to disable.
        !            27:     # mtu = 0
        !            28: 
        !            29:     # Whether to perform concurrent Netlink ROUTE queries on a single socket.
        !            30:     # parallel_route = no
        !            31: 
        !            32:     # Whether to perform concurrent Netlink XFRM queries on a single socket.
        !            33:     # parallel_xfrm = no
        !            34: 
        !            35:     # Whether to always use XFRM_MSG_UPDPOLICY to install policies.
        !            36:     # policy_update = no
        !            37: 
        !            38:     # Whether to use port or socket based IKE XFRM bypass policies.
        !            39:     # port_bypass = no
        !            40: 
        !            41:     # Whether to process changes in routing rules to trigger roam events.
        !            42:     # process_rules = no
        !            43: 
        !            44:     # Maximum Netlink socket receive buffer in bytes.
        !            45:     # receive_buffer_size = 0
        !            46: 
        !            47:     # Number of Netlink message retransmissions to send on timeout.
        !            48:     # retries = 0
        !            49: 
        !            50:     # Whether to trigger roam events when interfaces, addresses or routes
        !            51:     # change.
        !            52:     # roam_events = yes
        !            53: 
        !            54:     # Whether to set protocol and ports in the selector installed on transport
        !            55:     # mode IPsec SAs in the kernel.
        !            56:     # set_proto_port_transport_sa = no
        !            57: 
        !            58:     # Netlink message retransmission timeout, 0 to disable retransmissions.
        !            59:     # timeout = 0
        !            60: 
        !            61:     # Lifetime of XFRM acquire state and allocated SPIs in kernel.
        !            62:     # xfrm_acq_expires = 165
        !            63: 
        !            64:     # XFRM policy hashing threshold configuration for IPv4 and IPv6.
        !            65:     spdh_thresh {
        !            66: 
        !            67:         ipv4 {
        !            68: 
        !            69:             # Local subnet XFRM policy hashing threshold for IPv4.
        !            70:             # lbits = 32
        !            71: 
        !            72:             # Remote subnet XFRM policy hashing threshold for IPv4.
        !            73:             # rbits = 32
        !            74: 
        !            75:         }
        !            76: 
        !            77:         ipv6 {
        !            78: 
        !            79:             # Local subnet XFRM policy hashing threshold for IPv6.
        !            80:             # lbits = 128
        !            81: 
        !            82:             # Remote subnet XFRM policy hashing threshold for IPv6.
        !            83:             # rbits = 128
        !            84: 
        !            85:         }
        !            86: 
        !            87:     }
        !            88: 
        !            89: }
        !            90: