summaryrefslogtreecommitdiff
path: root/service/README.md
diff options
context:
space:
mode:
authorAdam Ierymenko <adam.ierymenko@gmail.com>2018-01-25 17:27:08 -0500
committerAdam Ierymenko <adam.ierymenko@gmail.com>2018-01-25 17:27:08 -0500
commit5f5302e59535c988188e3857469c5414014d62c4 (patch)
tree7e3eb5fbda49c8ab4037630598f367d653d9c7f1 /service/README.md
parent125ec622ca446021ad3d2a707752b11fcb5dd195 (diff)
downloadinfinitytier-5f5302e59535c988188e3857469c5414014d62c4.tar.gz
infinitytier-5f5302e59535c988188e3857469c5414014d62c4.zip
More useful to allow arrays of IPs to bind to.
Diffstat (limited to 'service/README.md')
-rw-r--r--service/README.md3
1 files changed, 1 insertions, 2 deletions
diff --git a/service/README.md b/service/README.md
index 2a6cb154..9ac097ab 100644
--- a/service/README.md
+++ b/service/README.md
@@ -32,13 +32,12 @@ Settings available in `local.conf` (this is not valid JSON, and JSON does not al
"softwareUpdateDist": true|false, /* If true, distribute software updates (only really useful to ZeroTier, Inc. itself, default is false) */
"interfacePrefixBlacklist": [ "XXX",... ], /* Array of interface name prefixes (e.g. eth for eth#) to blacklist for ZT traffic */
"allowManagementFrom": "NETWORK/bits"|null, /* If non-NULL, allow JSON/HTTP management from this IP network. Default is 127.0.0.1 only. */
- "bindToWildcard": true|false /* If true, bind to wildcard e.g. 0.0.0.0 instead of per interface */
+ "bind": [ "ip",... ] /* If present and non-null, bind to these IPs instead of to each interface (wildcard IP allowed) */
}
}
```
* **trustedPathId**: A trusted path is a physical network over which encryption and authentication are not required. This provides a performance boost but sacrifices all ZeroTier's security features when communicating over this path. Only use this if you know what you are doing and really need the performance! To set up a trusted path, all devices using it *MUST* have the *same trusted path ID* for the same network. Trusted path IDs are arbitrary positive non-zero integers. For example a group of devices on a LAN with IPs in 10.0.0.0/24 could use it as a fast trusted path if they all had the same trusted path ID of "25" defined for that network.
- * **relayPolicy**: Under what circumstances should this device relay traffic for other devices? The default is TRUSTED, meaning that we'll only relay for devices we know to be members of a network we have joined. NEVER is the default on mobile devices (iOS/Android) and tells us to never relay traffic. ALWAYS is usually only set for upstreams and roots, allowing them to act as promiscuous relays for anyone who desires it.
An example `local.conf`: