summaryrefslogtreecommitdiffstats
path: root/conntrackd.conf.5
diff options
context:
space:
mode:
authorArturo Borrero Gonzalez <arturo@debian.org>2017-05-09 09:41:15 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2017-05-15 12:39:11 +0200
commit3d9849649ec617b45a57a50c93244c13ea8244e0 (patch)
tree97e7bd7ff155d6b89798076482be13c0277e4a76 /conntrackd.conf.5
parentd31baccc493ec6484bfcb51d6bce78ff8c3ddc64 (diff)
conntrackd: request resync at startup
If a node goes to live, ask the other for resync at startup. This has to be done usually by hand, but I guess is an operation common enough to add some bits to ease people life here. Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'conntrackd.conf.5')
-rw-r--r--conntrackd.conf.525
1 files changed, 21 insertions, 4 deletions
diff --git a/conntrackd.conf.5 b/conntrackd.conf.5
index 4a4f2e2..94de327 100644
--- a/conntrackd.conf.5
+++ b/conntrackd.conf.5
@@ -22,7 +22,7 @@
.\" <http://www.gnu.org/licenses/>.
.\" %%%LICENSE_END
.\"
-.TH CONNTRACKD.CONF 5 "Oct 18, 2016"
+.TH CONNTRACKD.CONF 5 "May 09, 2017"
.SH NAME
conntrackd.conf \- configuration file for conntrackd daemon
@@ -78,8 +78,8 @@ This mode is based on a reliable protocol that performs message tracking.
Thus, the protocol can recover from message loss, re-ordering and corruption.
In this synchronization mode you may configure \fBResendQueueSize\fP,
-\fBCommitTimeout\fP, \fBPurgeTimeout\fP, \fBACKWindowSize\fP and
-\fBDisableExternalCache\fP.
+\fBCommitTimeout\fP, \fBPurgeTimeout\fP, \fBACKWindowSize\fP ,
+\fBDisableExternalCache\fP and \fBStartupResync\fP.
.TP
.BI "ResendQueueSize <value>"
@@ -146,6 +146,18 @@ enabling this option!
By default, this clause is set off.
+.TP
+.BI "StartupResync <on|off>"
+Order conntrackd to request a complete conntrack table resync against the other
+node at startup. A single request will be made.
+
+This is useful to get in sync with another node which has been running while we
+were down.
+
+Example: StartupResync on
+
+By default, this clause is set off.
+
.SS Mode ALARM
This mode is spamming. It is based on a alarm-based protocol that periodically
@@ -185,7 +197,8 @@ ie. unreliable protocol. This protocol sends and receives the state information
without performing any specific checking.
In this synchronization mode you may configure \fBDisableInternalCache\fP,
-\fBDisableExternalCache\fP, \fBCommitTimeout\fP and \fBPurgeTimeout\fP.
+\fBDisableExternalCache\fP, \fBCommitTimeout\fP, \fBPurgeTimeout\fP and
+\fBStartupResync\fP.
.TP
.BI "DisableInternalCache <on|off>"
@@ -206,6 +219,10 @@ Same as in \fBFTFW\fP mode.
.BI "PurgeTimeout <seconds>"
Same as in \fBFTFW\fP mode.
+.TP
+.BI "StartupResync <on|off>"
+Same as in \fBFTFW\fP mode.
+
.SS MULTICAST
This section indicates to \fBconntrackd(8)\fP to use multicast as transport