modify session manager related configuration

This commit is contained in:
luwenpeng
2024-08-29 16:25:15 +08:00
parent 419d12760e
commit 338dcf93e5
31 changed files with 928 additions and 1093 deletions

View File

@@ -10,7 +10,7 @@ dev_symbol = "nf_0_fw"
dumpfile_path = "./pcap/test.pcap"
#dumpfile_path = "/tmp/dumpfile/dumpfilelist"
nr_threads = 1 # [1, 256]
nr_worker_thread = 1 # [1, 256]
cpu_mask = [5, 6, 7, 8, 9, 10, 11, 12]
[ip_reassembly]
@@ -29,40 +29,39 @@ tcp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
udp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
# TCP timeout
tcp_init_timeout = 50 # range: [1, 60000] (ms)
tcp_handshake_timeout = 50 # range: [1, 60000] (ms)
tcp_data_timeout = 50 # range: [1, 15999999000] (ms)
tcp_half_closed_timeout = 50 # range: [1, 604800000] (ms)
tcp_time_wait_timeout = 50 # range: [1, 600000] (ms)
tcp_discard_timeout = 10 # range: [1, 15999999000] (ms)
tcp_unverified_rst_timeout = 50 # range: [1, 600000] (ms)
tcp_init_timeout_ms = 50 # range: [1, 60000] (ms)
tcp_handshake_timeout_ms = 50 # range: [1, 60000] (ms)
tcp_data_timeout_ms = 50 # range: [1, 15999999000] (ms)
tcp_half_closed_timeout_ms = 50 # range: [1, 604800000] (ms)
tcp_time_wait_timeout_ms = 50 # range: [1, 600000] (ms)
tcp_discard_timeout_ms = 10 # range: [1, 15999999000] (ms)
tcp_unverified_rst_timeout_ms = 50 # range: [1, 600000] (ms)
# UDP timeout
udp_data_timeout = 50 # range: [1, 15999999000] (ms)
udp_discard_timeout = 50 # range: [1, 15999999000] (ms)
udp_data_timeout_ms = 50 # range: [1, 15999999000] (ms)
udp_discard_timeout_ms = 50 # range: [1, 15999999000] (ms)
# limit
session_expire_polling_interval_ms = 0 # range: [0, 60000] (ms)
session_expire_polling_limit = 1024 # range: [1, 1024]
# duplicate packet filter
duplicated_packet_filter_enable = 1
duplicated_packet_filter_capacity = 1000000 # range: [1, 4294967295]
duplicated_packet_filter_timeout = 10000 # range: [1, 60000] (ms)
duplicated_packet_filter_timeout_ms = 10000 # range: [1, 60000] (ms)
duplicated_packet_filter_error_rate = 0.00001 # range: [0.0, 1.0]
# evicted session filter
evicted_session_filter_enable = 1
evicted_session_filter_capacity = 1000000 # range: [1, 4294967295]
evicted_session_filter_timeout = 10000 # range: [1, 60000] (ms)
evicted_session_filter_timeout_ms = 10000 # range: [1, 60000] (ms)
evicted_session_filter_error_rate = 0.00001 # range: [0.0, 1.0]
# TCP reassembly (Per direction)
tcp_reassembly_enable = 1
tcp_reassembly_max_timeout = 10000 # range: [1, 60000] (ms)
tcp_reassembly_max_segments = 256 # range: [2, 4096]
tcp_reassembly_max_timeout_ms = 10000 # range: [1, 60000] (ms)
tcp_reassembly_max_segments = 256 # range: [2, 4096]
[schedule]
# Note: free_expired_session_interval determines the precision of session_manager timeout
free_expired_session_interval = 50 # range: [1, 60000] (ms)
free_expired_session_batch = 100 # range: [1, 60000]
force_session_expire_before_exit = 0 # 1: force session to expire before exit, 0: wait for session to naturally expire before exit.
# Note: free_expired_ip_frag_interval determines the precision of ip_reassembly timeout
free_expired_ip_frag_interval = 50 # range: [1, 60000] (ms)
free_expired_ip_frag_batch = 100 # range: [1, 60000]

View File

@@ -10,7 +10,7 @@ dev_symbol = "nf_0_fw"
dumpfile_path = "/tmp/dumpfile/dumpfile.pcap"
#dumpfile_path = "/tmp/dumpfile/dumpfilelist"
nr_threads = 1 # [1, 256]
nr_worker_thread = 1 # [1, 256]
cpu_mask = [5]
[ip_reassembly]
@@ -29,40 +29,39 @@ tcp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
udp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
# TCP timeout
tcp_init_timeout = 50 # range: [1, 60000] (ms)
tcp_handshake_timeout = 50 # range: [1, 60000] (ms)
tcp_data_timeout = 50 # range: [1, 15999999000] (ms)
tcp_half_closed_timeout = 50 # range: [1, 604800000] (ms)
tcp_time_wait_timeout = 50 # range: [1, 600000] (ms)
tcp_discard_timeout = 50 # range: [1, 15999999000] (ms)
tcp_unverified_rst_timeout = 50 # range: [1, 600000] (ms)
tcp_init_timeout_ms = 50 # range: [1, 60000] (ms)
tcp_handshake_timeout_ms = 50 # range: [1, 60000] (ms)
tcp_data_timeout_ms = 50 # range: [1, 15999999000] (ms)
tcp_half_closed_timeout_ms = 50 # range: [1, 604800000] (ms)
tcp_time_wait_timeout_ms = 50 # range: [1, 600000] (ms)
tcp_discard_timeout_ms = 50 # range: [1, 15999999000] (ms)
tcp_unverified_rst_timeout_ms = 50 # range: [1, 600000] (ms)
# UDP timeout
udp_data_timeout = 50 # range: [1, 15999999000] (ms)
udp_discard_timeout = 50 # range: [1, 15999999000] (ms)
udp_data_timeout_ms = 50 # range: [1, 15999999000] (ms)
udp_discard_timeout_ms = 50 # range: [1, 15999999000] (ms)
# limit
session_expire_polling_interval_ms = 0 # range: [0, 60000] (ms)
session_expire_polling_limit = 1024 # range: [1, 1024]
# duplicate packet filter
duplicated_packet_filter_enable = 1
duplicated_packet_filter_capacity = 1000000 # range: [1, 4294967295]
duplicated_packet_filter_timeout = 100 # range: [1, 60000] (ms)
duplicated_packet_filter_timeout_ms = 100 # range: [1, 60000] (ms)
duplicated_packet_filter_error_rate = 0.00001 # range: [0.0, 1.0]
# evicted session filter
evicted_session_filter_enable = 1
evicted_session_filter_capacity = 1000000 # range: [1, 4294967295]
evicted_session_filter_timeout = 100 # range: [1, 60000] (ms)
evicted_session_filter_timeout_ms = 100 # range: [1, 60000] (ms)
evicted_session_filter_error_rate = 0.00001 # range: [0.0, 1.0]
# TCP reassembly (Per direction)
tcp_reassembly_enable = 1
tcp_reassembly_max_timeout = 10000 # range: [1, 60000] (ms)
tcp_reassembly_max_segments = 128 # range: [2, 4096]
tcp_reassembly_max_timeout_ms = 10000 # range: [1, 60000] (ms)
tcp_reassembly_max_segments = 128 # range: [2, 4096]
[schedule]
# Note: free_expired_session_interval determines the precision of session_manager timeout
free_expired_session_interval = 50 # range: [1, 60000] (ms)
free_expired_session_batch = 1000 # range: [1, 60000]
force_session_expire_before_exit = 0 # 1: force session to expire before exit, 0: wait for session to naturally expire before exit.
# Note: free_expired_ip_frag_interval determines the precision of ip_reassembly timeout
free_expired_ip_frag_interval = 50 # range: [1, 60000] (ms)
free_expired_ip_frag_batch = 1000 # range: [1, 60000]