kernel-netlink.conf 2.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687
  1. kernel-netlink {
  2. # Buffer size for received Netlink messages.
  3. # buflen = <min(PAGE_SIZE, 8192)>
  4. # Force maximum Netlink receive buffer on Netlink socket.
  5. # force_receive_buffer_size = no
  6. # Firewall mark to set on the routing rule that directs traffic to our
  7. # routing table.
  8. # fwmark =
  9. # Whether to ignore errors potentially resulting from a retransmission.
  10. # ignore_retransmit_errors = no
  11. # Whether to load the plugin. Can also be an integer to increase the
  12. # priority of this plugin.
  13. load = yes
  14. # MSS to set on installed routes, 0 to disable.
  15. # mss = 0
  16. # MTU to set on installed routes, 0 to disable.
  17. # mtu = 0
  18. # Whether to perform concurrent Netlink ROUTE queries on a single socket.
  19. # parallel_route = no
  20. # Whether to perform concurrent Netlink XFRM queries on a single socket.
  21. # parallel_xfrm = no
  22. # Whether to always use XFRM_MSG_UPDPOLICY to install policies.
  23. # policy_update = no
  24. # Whether to use port or socket based IKE XFRM bypass policies.
  25. # port_bypass = no
  26. # Whether to process changes in routing rules to trigger roam events.
  27. # process_rules = no
  28. # Maximum Netlink socket receive buffer in bytes.
  29. # receive_buffer_size = 0
  30. # Number of Netlink message retransmissions to send on timeout.
  31. # retries = 0
  32. # Whether to trigger roam events when interfaces, addresses or routes
  33. # change.
  34. # roam_events = yes
  35. # Whether to set protocol and ports in the selector installed on transport
  36. # mode IPsec SAs in the kernel.
  37. # set_proto_port_transport_sa = no
  38. # Netlink message retransmission timeout, 0 to disable retransmissions.
  39. # timeout = 0
  40. # Lifetime of XFRM acquire state and allocated SPIs in kernel.
  41. # xfrm_acq_expires = 165
  42. # XFRM policy hashing threshold configuration for IPv4 and IPv6.
  43. spdh_thresh {
  44. ipv4 {
  45. # Local subnet XFRM policy hashing threshold for IPv4.
  46. # lbits = 32
  47. # Remote subnet XFRM policy hashing threshold for IPv4.
  48. # rbits = 32
  49. }
  50. ipv6 {
  51. # Local subnet XFRM policy hashing threshold for IPv6.
  52. # lbits = 128
  53. # Remote subnet XFRM policy hashing threshold for IPv6.
  54. # rbits = 128
  55. }
  56. }
  57. }