mirror of
https://github.com/openziti/ziti.git
synced 2026-10-12 15:28:05 +00:00
Paul Lorenz
121 lines
3.9 KiB
YAML
121 lines
3.9 KiB
YAML
# Config Format Version
|
|
#
|
|
# Whenever a breaking change is made to the semantics of this configuration file, the configuration version
|
|
# expected by the router will be incremented. When the controller tries to load a configuration file with
|
|
# an incompatible version, it will abort with a message prompting the operator to seek out the breaking changes
|
|
# documentation.
|
|
#
|
|
v: 2
|
|
|
|
# Identity
|
|
#
|
|
# Define all of the paths to the certificates and key required to establish the router's identity.
|
|
#
|
|
identity:
|
|
cert: etc/ca/intermediate/certs/001-client.cert.pem
|
|
server_cert: etc/ca/intermediate/certs/001-server.cert.pem
|
|
key: etc/ca/intermediate/private/001.key.pem
|
|
ca: etc/ca/intermediate/certs/ca-chain.cert.pem
|
|
|
|
# Forwarder Configuration
|
|
#
|
|
forwarder:
|
|
#
|
|
# How frequently does the forwarder probe the link latency. This will ultimately determine the resolution of the
|
|
# responsiveness available to smart routing. This resolution comes at the expense of bandwidth utilization for the
|
|
# probes, control plane utilization, and CPU utilization processing the results.
|
|
#
|
|
latencyProbeInterval: 1000
|
|
|
|
# Tracing
|
|
#
|
|
# Record message traces of all messages captured on any channel (`ctrl` or `link`) in "dump" format to the
|
|
# specified path. The `ziti-fabric trace dump` utility will convert this binary dump file into a human-readable
|
|
# explanation of the messages that were sent and received by the router.
|
|
#
|
|
#trace:
|
|
# path: ctrl.trace
|
|
|
|
# Profiling
|
|
#
|
|
# Enable and configure memory and CPU profiling for the router. See `go tool pprof` for information on how
|
|
# to work with this profile data.
|
|
#
|
|
#profile:
|
|
#memory:
|
|
#path: ctrl.memprof
|
|
#
|
|
# Defines the interval at which memory profiling snapshots will be recorded.
|
|
#
|
|
#intervalMs: 15
|
|
#cpu:
|
|
#path: ctrl.cpuprof
|
|
|
|
# Control Channel Configuration
|
|
#
|
|
# Define the endpoint address for the control ('ctrl') channel.
|
|
#
|
|
ctrl:
|
|
endpoint: tls:127.0.0.1:6262
|
|
|
|
healthCheck:
|
|
# Specifies the health check port. If not present, the health check will be disabled
|
|
#port: 8081
|
|
# Specifies what address to bind to. Default to blank, which will bind to all available addresses
|
|
bindAddress: ""
|
|
# How often to ping the controller over the control channel. Defaults to 30 seconds
|
|
ctrlPingInterval: 30s
|
|
# When to timeout the ping. Defaults to 15 seconds
|
|
ctrlPingTimeout: 15s
|
|
# How long to wait before pinging the controller. Defaults to 15 seconds
|
|
initialDelay: 15s
|
|
|
|
# Listener Configuration
|
|
#
|
|
# Define the Xgress listeners to start up, and their configuration.
|
|
#
|
|
listeners:
|
|
# basic ssh proxy
|
|
- binding: proxy
|
|
address: tcp:0.0.0.0:1122
|
|
service: ssh
|
|
|
|
# for iperf_tcp (iperf3)
|
|
- binding: proxy
|
|
address: tcp:0.0.0.0:7001
|
|
service: iperf
|
|
|
|
# for iperf_udp (iperf3)
|
|
- binding: proxy_udp
|
|
address: udp:0.0.0.0:7001
|
|
service: iperf_udp
|
|
|
|
# example xgress_transport
|
|
- binding: transport
|
|
address: tls:0.0.0.0:7002
|
|
#
|
|
# Every Xgress listener will accept at least the following options.
|
|
#
|
|
options:
|
|
#
|
|
# `retransmission` should always be enabled. Disabling this disables retransmission support across
|
|
# the overlay for this router. This should either be on, or off for all routers in a network.
|
|
#
|
|
retransmission: true
|
|
#
|
|
# `randomDrops` enables random payload discarding, which is useful for testing retransmission functions.
|
|
#
|
|
randomDrops: true
|
|
#
|
|
# `drop1InN` controls how frequently payloads will be randomly dropped.
|
|
#
|
|
drop1InN: 5000
|
|
|
|
# example xgress_udp
|
|
- binding: udp
|
|
address: udp:0.0.0.0:7003
|
|
options:
|
|
retransmission: true
|
|
randomDrops: true
|
|
drop1InN: 5000
|