diff options
author | Alain Lamar <alain_lamar@yahoo.de> | 2024-06-24 14:55:23 +0200 |
---|---|---|
committer | Alain Lamar <alain_lamar@yahoo.de> | 2024-06-24 14:55:23 +0200 |
commit | a95d2c9744c8e08efac2bb562d5ad1f8956a4c12 (patch) | |
tree | a2c3a267cd973d6b89db3376a023374537975d3b /docs/configuration/system | |
parent | dcc1645e54fe6573efd8a2b808c9a7b8c9341652 (diff) | |
parent | ea35f9d6641ae11fa71c4aa5f19e1b8085d45b6d (diff) | |
download | vyos-documentation-a95d2c9744c8e08efac2bb562d5ad1f8956a4c12.tar.gz vyos-documentation-a95d2c9744c8e08efac2bb562d5ad1f8956a4c12.zip |
wireless: T6320: Merge remote-tracking branch 'upstream' into T6320
Diffstat (limited to 'docs/configuration/system')
-rw-r--r-- | docs/configuration/system/conntrack.rst | 39 |
1 files changed, 6 insertions, 33 deletions
diff --git a/docs/configuration/system/conntrack.rst b/docs/configuration/system/conntrack.rst index 1401e02e..6d551575 100644 --- a/docs/configuration/system/conntrack.rst +++ b/docs/configuration/system/conntrack.rst @@ -64,39 +64,7 @@ Configure Contrack Timeouts ================= -VyOS supports setting timeouts for connections according to the -connection type. You can set timeout values for generic connections, for ICMP -connections, UDP connections, or for TCP connections in a number of different -states. - -.. cfgcmd:: set system conntrack timeout icmp <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout other <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout tcp close <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout tcp close-wait <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout tcp established <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout tcp fin-wait <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout tcp last-ack <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout tcp syn-recv <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout tcp syn-sent <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout tcp time-wait <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout udp other <1-21474836> - :defaultvalue: -.. cfgcmd:: set system conntrack timeout udp stream <1-21474836> - :defaultvalue: - - Set the timeout in seconds for a protocol or state. - -You can also define custom timeout values to apply to a specific subset of +You can define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector. @@ -177,6 +145,11 @@ create a rule defining the packet and flow selector. Conntrack ignore rules ====================== +.. note:: **Important note about conntrack ignore rules:** + Starting from vyos-1.5-rolling-202406120020, ignore rules can be defined in + ``set firewall [ipv4 | ipv6] prerouting raw ...``. It's expected that in + the future the conntrack ignore rules will be removed. + Customized ignore rules, based on a packet and flow selector. .. cfgcmd:: set system conntrack ignore [ipv4 | ipv6] rule <1-999999> |