1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
[instance]
id = 1 # range: [0, 4095] (12 bit)
[packet_io]
mode = "pcapfile" # pcapfile, pcaplist, marsio
app_symbol = "stellar"
dev_symbol = "nf_0_fw"
pcap_path = "/tmp/test.pcap"
pcap_done_exit = 1 # range: [0, 1]
thread_num = 1 # range: [1, 256]
cpu_mask = [5, 6, 7, 8, 9, 10, 11, 12]
idle_yield_ms = 900 # range: [0, 60000] (ms)
[packet_io.packet_pool]
capacity = 1024 # range: [1, 4294967295]
[packet_io.ip_reassembly]
fail_action = 1 # 0: bypass, 1: drop
timeout_ms = 1000 # range: [1, 60000] (ms)
frag_queue_num = 1024 # range: [1, 4294967295]
frag_queue_size = 64 # range: [2, 65535]
[session_manager]
tcp_session_max = 50000
udp_session_max = 50000
evict_old_on_tcp_table_limit = 1 # range: [0, 1]
evict_old_on_udp_table_limit = 1 # range: [0, 1]
expire_period_ms = 0 # range: [0, 60000] (ms)
expire_batch_max = 1024 # range: [1, 1024]
[session_manager.tcp_timeout_ms]
init = 5000 # range: [1, 60000] (ms)
handshake = 5000 # range: [1, 60000] (ms)
data = 5000 # range: [1, 15999999000] (ms)
half_closed = 5000 # range: [1, 604800000] (ms)
time_wait = 5000 # range: [1, 600000] (ms)
discard_default = 10000 # range: [1, 15999999000] (ms)
unverified_rst = 5000 # range: [1, 600000] (ms)
[session_manager.udp_timeout_ms]
data = 5000 # range: [1, 15999999000] (ms)
discard_default = 5000 # range: [1, 15999999000] (ms)
[session_manager.duplicated_packet_bloom_filter]
enable = 1
capacity = 1000000 # range: [1, 4294967295]
time_window_ms = 10000 # range: [1, 60000] (ms)
error_rate = 0.00001 # range: [0.0, 1.0]
[session_manager.evicted_session_bloom_filter]
enable = 1 # range: [0, 1]
capacity = 1000000 # range: [1, 4294967295]
time_window_ms = 10000 # range: [1, 60000] (ms)
error_rate = 0.00001 # range: [0.0, 1.0]
[session_manager.tcp_reassembly]
enable = 1 # range: [0, 1]
timeout_ms = 10000 # range: [1, 60000] (ms)
buffered_segments_max = 256 # range: [2, 4096] per flow
[dns_decoder]
port=[53,5353]
[dns_decoder.limited]
max_rr_num=256
max_cache_trans_num=16
[dns_decoder.local_stat]
# stat_per_thread_enable value in [yes,no]
stat_per_thread_enable="no"
stat_name="DNS_DECODER"
stat_interval_time_s=5
stat_output="metrics/dns_decoder_local_stat.json"
[log]
output = "both" # stderr, file, both
file = "log/stellar.log"
level = "INFO" # TRACE, DEBUG, INFO, WARN, ERROR, FATAL
[[module]]
path = ""
init = "packet_manager_on_init"
exit = "packet_manager_on_exit"
thread_init = "packet_manager_on_thread_init"
thread_exit = "packet_manager_on_thread_exit"
[[module]]
path = ""
init = "session_manager_on_init"
exit = "session_manager_on_exit"
thread_init = "session_manager_on_thread_init"
thread_exit = "session_manager_on_thread_exit"
|
