Accelerated data-plane 295 Network interfaces 300 324 Bonding Interface/Link Aggregation bond[0-9]+ Bonding interface must be named bondN bondN Bonding interface name #include #include Bonding transmit hash policy layer2 layer2+3 layer3+4 layer2 use MAC addresses to generate the hash layer2+3 combine MAC address and IP address to make hash layer3+4 combine IP address and port to make hash (layer2\+3|layer3\+4|layer2) hash-policy must be layer2 layer2+3 layer3+4 layer2 #include #include Bonding mode 802.3ad active-backup broadcast round-robin xor-hash 802.3ad IEEE 802.3ad Dynamic link aggregation active-backup Fault tolerant: only one slave in the bond is active broadcast Fault tolerant: transmits everything on all slave interfaces round-robin Load balance: transmit packets in sequential order xor-hash Distribute based on MAC address (802.3ad|active-backup|broadcast|round-robin|xor-hash) mode must be 802.3ad, active-backup, broadcast, round-robin, or xor 802.3ad Bonding member interfaces Member interface name txt Interface name 327 Bridge domain br(?!0$)[0-9]+ Bridge domain must be named brN and br0 is reserved brN Bridge interface name #include #include Bridge member interfaces Member interface name txt Interface name Bridge Virtual Interface (BVI) 325 Generic Network Encapsulation (GRE) Interface gre[0-9]+ GRE interface must be named greN greN GRE interface name #include #include GRE tunnel mode point-to-point point-to-multipoint point-to-point Point to point mode point-to-multipoint Point to multipoint mode (point-to-point|point-to-multipoint) Invalid mode, must be one of: point-to-point or point-to-multipoint point-to-point GRE tunnel type erspan l3 teb erspan Encapsulated Remote Switched Port Analyzer l3 Generic Routing Encapsulation (network layer) teb L2 Transparent Ethernet Bridge (erspan|l3|teb) Invalid encapsulation, must be one of: l3, teb or erspan l3 #include #include #include 325 IP encapsulation tunnel interface ipip[0-9]+ IPIP tunnel interface must be named ipipN ipipN IPIP tunnel interface name #include #include #include #include #include 325 Loopback Interface lo[0-9]+ Loopback interface must be named loN loN Loopback interface name #include #include #include 325 Virtual Extensible LAN (VXLAN) Interface vxlan[0-9]+ VXLAN interface must be named vxlanN vxlanN VXLAN interface name #include #include #include #include #include #include Layer 2 cross connect 325 xcon[0-9]+ Cross connect must be named xconN xconN Cross connect interface name #include #include Cross connect pair mamber interfaces Member interface name txt Interface name IP Flow Information Export (IPFIX) configuration 332 Collector IP address ipv4 IPv4 server to export IPFIX ipv6 IPv6 server to export IPFIX #include 4739 Path MTU u32:68-1450 Bytes 512 #include Interval in seconds u32:1-300 Seconds 20 Allow UDP checksum Interface txt Interface name Flow direction rx tx both rx Rx direction tx Tx direction both Rx and Tx direction (rx|tx|both) both Flow variant l2 ipv4 ipv6 l2 L2 _ipv4 IPv4 _ipv6 IPv6 (l2|ipv4|ipv6) ipv4 Flow activity timeout u32:0-2147483647 Active flow export timeout (seconds) 15 Flow inactivity timeout u32:0-2147483647 Inactive flow export timeout (seconds) 120 Flow record layers l2 l3 l4 l2 Include level 2 information l3 Include level 3 information l4 Include level 4 information (l2|l3|l4) l3 VPP settings Resource allocation settings Create worker threads (including main-core) u32:1-512 Worker threads 1 Buffer settings Number of buffers per numa node auto u32:16384-4294967295 Number of buffers auto Auto calculate number of buffers per numa node (auto) auto Size of buffer data area u32 Size of buffer data area 2048 Set the page-size for buffer allocation #include 2M IPv6 settings IPv6 heap size #include 32M IPv6 forwarding table hash buckets u32:1-4294967295 IPv6 forwarding table hash buckets 65536 Number of MAC addresses in the L2 FIB u32:1-4294967295 Number of MAC addresses in the L2 FIB 4194304 Ignore kernel routes Memory settings Main heap size #include 3G Main heap page size #include 2M Memory size for protectable memory allocator (pmalloc) memory space #include Stats settings Size of stats segment #include 128M Stats page size #include 2M Interface ethN Interface name Invalid interface name Receive ring descriptors u32:256-16384 Number of descriptors in receive ring 1024 Tranceive ring descriptors u32:256-8192 Number of descriptors in tranceive ring 1024 Number of receive queues u32:1-8192 Number of receive queues Number of tranceive queues u32:1-8192 Number of tranceive queues Enable IPsec acceleration Logging settings Default logging level alert crit debug disabled emerg error info notice warn alert Alert crit Critical debug Debug disabled Disabled emerg Emergency error Error info Informational notice Notice warn Warning (alert|crit|debug|disabled|emerg|error|info|notice|warn) Add a fixed-sleep between main loop poll u32:0-500000 Sleep interval in microseconds 0 #include VPP data-plane sFlow 322 Interface name txt Interface name sFlow maximum packet-header length 64 96 128 160 192 224 256 64 64 bytes 96 96 bytes 128 128 bytes 160 160 bytes 192 192 bytes 224 224 bytes 256 256 bytes (64|96|128|160|192|224|256) 128 Network Address Translation (NAT) settings Carrier-grade NAT (CGNAT) 331 CGNAT interface setting CGNAT inside interface CGNAT outside interface Rule number for CGNAT u32 Number of rule Inside IPv4 prefix ipv4net IPv4 prefix Outside IPv4 prefix ipv4net IPv4 prefix #include Timeouts for CGNAT sessions ICMP timeout u32 Timeout in seconds (default: 60) 60 TCP established timeout u32 TCP established timeout in seconds (default: 7440) 7440 TCP transitory timeout u32 Timeout in seconds (default: 240) 240 UDP timeout u32 Timeout in seconds (default: 300) 300 NAT44 330 NAT44 session timeouts ICMP timeout u32 Timeout in seconds (default: 60) 60 TCP established timeout u32 TCP established timeout in seconds (default: 7440) 7440 TCP transitory timeout u32 Timeout in seconds (default: 240) 240 UDP timeout u32 Timeout in seconds (default: 300) 300 Maximum number of sessions per thread u32 Number of sessions Number of sessions must be between 1 and 4294967295 64512 NAT interface setting NAT inside interface NAT outside interface NAT address pool NAT translation pool #include #include NAT twice-nat pool #include #include Static NAT rules Rule number for NAT u32 Number of NAT rule #include NAT external parameters IP address ipv4 IPv4 address #include NAT local parameters IP address ipv4 IPv4 address #include NAT static mapping options Rewrite source IP addresses on packets sent from outside to inside Rewrite source IP addresses on packets sent only from a local address to an external address Only apply rule for traffic from outside to inside interfaces Force use of specific IP address from twice-nat address pool ipv4 IPv4 address #include Exclude packets matching these rules from NAT Rule number u32 Number of rule IP address of the internal (local) device ipv4 IPv4 address Port number used by connection on internal device u32:1-65535 Numeric IP port Port number must be in range 1 to 65535 #include External interface #include Access Control Lists (ACLs) 332 Access Control List by IPv4/IPv6 ACL tag name txt Tag name #include Rule number for Access control element (ACE) u32 Number of ACE Rule number must be between 1 and 4294967295 #include Rule action permit deny permit-reflect permit Permit matching traffic deny Deny matching traffic permit-reflect Permit the matching outbound traffic and allow the reverse traffic (permit|deny|permit-reflect) Source parameters #include #include Destination parameters #include #include Protocol all all All IP protocols <protocol> IP protocol name all Match TCP packet flags Match TCP flags that are set #include Match TCP flags that are not set #include Apply an ACL to an interface Input direction #include Output direction #include Access Control List by mac address ACL tag name txt ACL name #include Rule number for Access control element (ACE) u32 Number of ACE Rule number must be between 1 and 4294967295 #include Rule action permit deny permit Permit matching traffic deny Deny matching traffic (permit|deny) #include Source IP prefix Source MAC address macaddr MAC address Source MAC mask (default ff:ff:ff:ff:ff:ff) macaddr MAC mask ff:ff:ff:ff:ff:ff Apply an ACL to an input interface ACL tag name vpp acl mac tag-name VPP kernel interface settings 328 vpptapN Kernel interface name vpptunN Kernel interface name vpp(tun|tap)\d+ Kernel interface must start with vpp and include tun or tap N #include #include #include #include #include