mirror of
https://github.com/openziti/ziti.git
synced 2026-10-12 15:28:05 +00:00
Michael Quigley
117 lines
3.2 KiB
YAML
117 lines
3.2 KiB
YAML
v: 3
|
|
|
|
identity:
|
|
cert: etc/ca/intermediate/certs/001-client.cert.pem
|
|
server_cert: etc/ca/intermediate/certs/001-server.cert.pem
|
|
key: etc/ca/intermediate/private/001.key.pem
|
|
ca: etc/ca/intermediate/certs/ca-chain.cert.pem
|
|
|
|
# Configure the forwarder options
|
|
#
|
|
forwarder:
|
|
# How frequently does the forwarder probe the link latency. This will ultimately determine the resolution of the
|
|
# responsiveness available to smart routing. This resolution comes at the expense of bandwidth utilization for the
|
|
# probes, control plane utilization, and CPU utilization processing the results.
|
|
# (default 10000)
|
|
#
|
|
latencyProbeInterval: 10000
|
|
#
|
|
# After how many milliseconds does the link latency probe timeout?
|
|
# (default 10000)
|
|
#
|
|
latencyProbeTimeout: 10000
|
|
#
|
|
# After how many milliseconds of inactivity is a forwarding table entry considered idle?
|
|
#
|
|
idleSessionTimeout: 60000
|
|
#
|
|
# How frequently will we confirm idle sessions with the controller?
|
|
#
|
|
idleTxInterval: 60000
|
|
#
|
|
# How many xgress dials can be queued for processing by the xgress dial workers. An xgress dial occurs
|
|
# for services that have a terminator egress specified with an xgress binding (e.g. transport)
|
|
# (minimum 1, max 10000, default 1000)
|
|
#
|
|
xgressDialQueueLength: 1000
|
|
#
|
|
# The number of xgress dial workers used to process the xgress dial queue.
|
|
# (minimum 1, max 10000, default 10)
|
|
#
|
|
xgressDialWorkerCount: 10
|
|
#
|
|
# How many link dials can be queued for processing by the link dial workers. An link dial occurs
|
|
# when a router is notified of a new router by the controller.
|
|
# (minimum 1, max 10000, default 1000)
|
|
#
|
|
linkDialQueueLength: 1000
|
|
#
|
|
# The number of link dial workers used to process the link dial queue.
|
|
# (minimum 1, max 10000, default 10)
|
|
#
|
|
linkDialWorkerCount: 10
|
|
#
|
|
# (Debugging) Xgress dial "dwell time". When dialing, the Xgress framework will wait this number of milliseconds
|
|
# before responding in the affirmative to the controller.
|
|
#
|
|
xgressDialDwellTime: 0
|
|
|
|
#trace:
|
|
# path: 001.trace
|
|
|
|
#profile:
|
|
# memory:
|
|
# path: 001.memprof
|
|
# cpu:
|
|
# path: 001.cpuprof
|
|
|
|
ctrl:
|
|
endpoint: tls:127.0.0.1:6262
|
|
|
|
link:
|
|
dialers:
|
|
- binding: transport
|
|
|
|
listeners:
|
|
# basic ssh proxy
|
|
- binding: proxy
|
|
address: tcp:0.0.0.0:1122
|
|
service: ssh
|
|
options:
|
|
retransmission: true
|
|
|
|
# for iperf_tcp (iperf3)
|
|
- binding: proxy
|
|
address: tcp:0.0.0.0:7001
|
|
service: iperf
|
|
|
|
# for iperf_udp (iperf3)
|
|
- binding: proxy_udp
|
|
address: udp:0.0.0.0:7001
|
|
service: iperf_udp
|
|
|
|
# example xgress_transport
|
|
- binding: transport
|
|
address: tls:0.0.0.0:7002
|
|
options:
|
|
retransmission: true
|
|
randomDrops: true
|
|
drop1InN: 5000
|
|
|
|
# example xgress_udp
|
|
- binding: transport_udp
|
|
address: udp:0.0.0.0:7003
|
|
options:
|
|
retransmission: true
|
|
randomDrops: true
|
|
drop1InN: 5000
|
|
|
|
dialers:
|
|
- binding: transport
|
|
options:
|
|
retransmission: true
|
|
|
|
# xctrl_example
|
|
#
|
|
#example:
|
|
# delay: 1 |