Tobias Brunner
9d5e619e19
If there are lots of SAs to be synced, the default might be too low and messages and SAs get dropped. The new default is already 8 MiB, which should work fine for lots of SAs. The code mirrors the one in the kernel-netlink plugin (but with a guard around SO_RCVBUFFORCE, even though this plugin is mostly used on Linux as well).
42 lines
1.3 KiB
Plaintext
42 lines
1.3 KiB
Plaintext
charon.plugins.ha.autobalance = 0
|
|
Interval in seconds to automatically balance handled segments between nodes.
|
|
Set to 0 to disable.
|
|
|
|
charon.plugins.ha.buflen = 2048
|
|
Buffer size for received HA messages.
|
|
|
|
Buffer size for received HA messages. For IKEv1 the public DH factors are
|
|
also transmitted so depending on the DH group the HA messages can get quite
|
|
big (the default should be fine up to _modp4096_).
|
|
|
|
charon.plugins.ha.receive_buffer_size = 8388608
|
|
Maximum receive buffer size for the HA socket in bytes.
|
|
|
|
Maximum receive buffer size for the HA socket in bytes. This value controls
|
|
how many bytes of HA messages can be queued to the socket. If set to 0, the
|
|
default from `/proc/sys/net/core/rmem_default` will apply. Note that the
|
|
kernel doubles the configured value to account for overhead. To exceed the
|
|
system-wide maximum from `/proc/sys/net/core/rmem_max`, special privileges
|
|
(CAP_NET_ADMIN) are necessary, otherwise, the kernel silently caps the
|
|
value.
|
|
|
|
charon.plugins.ha.fifo_interface = yes
|
|
|
|
charon.plugins.ha.heartbeat_delay = 1000
|
|
|
|
charon.plugins.ha.heartbeat_timeout = 2100
|
|
|
|
charon.plugins.ha.local =
|
|
|
|
charon.plugins.ha.monitor = yes
|
|
|
|
charon.plugins.ha.pools =
|
|
|
|
charon.plugins.ha.remote =
|
|
|
|
charon.plugins.ha.resync = yes
|
|
|
|
charon.plugins.ha.secret =
|
|
|
|
charon.plugins.ha.segment_count = 1
|