diff options
| author | Samuel Gauthier <samuel.gauthier@6wind.com> | 2009-09-03 15:06:23 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2009-09-03 15:06:23 +0200 |
| commit | 49540362b2a25aadbaf25fd087414776aa5a67a8 (patch) | |
| tree | aaf75b254cc6e6046c0040be846470ee49c321b2 /doc | |
| parent | 55b1c38aca5552f3a2140d2cb5406ec1afe67f20 (diff) | |
| download | conntrack-tools-49540362b2a25aadbaf25fd087414776aa5a67a8.tar.gz conntrack-tools-49540362b2a25aadbaf25fd087414776aa5a67a8.zip | |
conntrackd: fix bad configuration file for DisableExternalCache statement
DisableExternalCache is supposed to be put in mode NOTRACK{} or
Mode FTFW{} statement.
Signed-off-by: Samuel Gauthier <samuel.gauthier@6wind.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/sync/ftfw/conntrackd.conf | 25 | ||||
| -rw-r--r-- | doc/sync/notrack/conntrackd.conf | 25 |
2 files changed, 26 insertions, 24 deletions
diff --git a/doc/sync/ftfw/conntrackd.conf b/doc/sync/ftfw/conntrackd.conf index 76c3aef..6a54539 100644 --- a/doc/sync/ftfw/conntrackd.conf +++ b/doc/sync/ftfw/conntrackd.conf @@ -48,6 +48,19 @@ Sync { # with oprofile. If not set, default window size is 300. # # ACKWindowSize 300 + + # + # This clause allows you to disable the external cache. Thus, the + # state entries are directly injected into the kernel conntrack + # table. As a result, you save memory in user-space but you consume + # slots in the kernel conntrack table for backup state entries. + # Moreover, disabling the external cache means more CPU consumption. + # You need a Linux kernel >= 2.6.29 to use this feature. By default, + # this clause is set off. If you are installing conntrackd for first + # time, please read the user manual and I encourage you to consider + # using the fail-over scripts instead of enabling this option! + # + # DisableExternalCache Off } # @@ -190,18 +203,6 @@ Sync { # Checksum on # } - # - # This clause allows you to disable the external cache. Thus, the - # state entries are directly injected into the kernel conntrack - # table. As a result, you save memory in user-space but you consume - # slots in the kernel conntrack table for backup state entries. - # Moreover, disabling the external cache means more CPU consumption. - # You need a Linux kernel >= 2.6.29 to use this feature. By default, - # this clause is set off. If you are installing conntrackd for first - # time, please read the user manual and I encourage you to consider - # using the fail-over scripts instead of enabling this option! - # - # DisableExternalCache Off } # diff --git a/doc/sync/notrack/conntrackd.conf b/doc/sync/notrack/conntrackd.conf index 25c4e7f..152880b 100644 --- a/doc/sync/notrack/conntrackd.conf +++ b/doc/sync/notrack/conntrackd.conf @@ -25,6 +25,19 @@ Sync { # trigger several consecutive hand-overs. Default is 60 seconds. # # PurgeTimeout 60 + + # + # This clause allows you to disable the external cache. Thus, the + # state entries are directly injected into the kernel conntrack + # table. As a result, you save memory in user-space but you consume + # slots in the kernel conntrack table for backup state entries. + # Moreover, disabling the external cache means more CPU consumption. + # You need a Linux kernel >= 2.6.29 to use this feature. By default, + # this clause is set off. If you are installing conntrackd for first + # time, please read the user manual and I encourage you to consider + # using the fail-over scripts instead of enabling this option! + # + # DisableExternalCache Off } # @@ -172,18 +185,6 @@ Sync { # Checksum on # } - # - # This clause allows you to disable the external cache. Thus, the - # state entries are directly injected into the kernel conntrack - # table. As a result, you save memory in user-space but you consume - # slots in the kernel conntrack table for backup state entries. - # Moreover, disabling the external cache means more CPU consumption. - # You need a Linux kernel >= 2.6.29 to use this feature. By default, - # this clause is set off. If you are installing conntrackd for first - # time, please read the user manual and I encourage you to consider - # using the fail-over scripts instead of enabling this option! - # - # DisableExternalCache Off } # |