summaryrefslogtreecommitdiff
path: root/conf/plugins/kernel-netlink.conf
diff options
context:
space:
mode:
authorYves-Alexis Perez <corsac@debian.org>2015-04-11 22:03:59 +0200
committerYves-Alexis Perez <corsac@debian.org>2015-04-11 22:03:59 +0200
commit83b8aebb19fe6e49e13a05d4e8f5ab9a06177642 (patch)
tree51255545ba43b84aa5d673bd0eb557cbd0155c9e /conf/plugins/kernel-netlink.conf
parent2b8de74ff4c334c25e89988c4a401b24b5bcf03d (diff)
downloadvyos-strongswan-83b8aebb19fe6e49e13a05d4e8f5ab9a06177642.tar.gz
vyos-strongswan-83b8aebb19fe6e49e13a05d4e8f5ab9a06177642.zip
Imported Upstream version 5.3.0
Diffstat (limited to 'conf/plugins/kernel-netlink.conf')
-rw-r--r--conf/plugins/kernel-netlink.conf21
1 files changed, 21 insertions, 0 deletions
diff --git a/conf/plugins/kernel-netlink.conf b/conf/plugins/kernel-netlink.conf
index f05f486b1..723bf0a49 100644
--- a/conf/plugins/kernel-netlink.conf
+++ b/conf/plugins/kernel-netlink.conf
@@ -4,6 +4,9 @@ kernel-netlink {
# routing table.
# fwmark =
+ # Whether to ignore errors potentially resulting from a retransmission.
+ # ignore_retransmit_errors = no
+
# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes
@@ -14,6 +17,21 @@ kernel-netlink {
# MTU to set on installed routes, 0 to disable.
# mtu = 0
+ # Whether to perform concurrent Netlink ROUTE queries on a single socket.
+ # parallel_route = no
+
+ # Whether to perform concurrent Netlink XFRM queries on a single socket.
+ # parallel_xfrm = no
+
+ # Whether to always use XFRM_MSG_UPDPOLICY to install policies.
+ # policy_update = no
+
+ # Whether to use port or socket based IKE XFRM bypass policies.
+ # port_bypass = no
+
+ # Number of Netlink message retransmissions to send on timeout.
+ # retries = 0
+
# Whether to trigger roam events when interfaces, addresses or routes
# change.
# roam_events = yes
@@ -22,6 +40,9 @@ kernel-netlink {
# mode IPsec SAs in the kernel.
# set_proto_port_transport_sa = no
+ # Netlink message retransmission timeout, 0 to disable retransmissions.
+ # timeout = 0
+
# Lifetime of XFRM acquire state in kernel.
# xfrm_acq_expires = 165