[ViewVC] Diff of: cvs/gvpe/doc/gvpe.conf.5.pod

Comparing gvpe/doc/gvpe.conf.5.pod (file contents):
Revision 1.14 by pcg, Tue Jun 21 08:46:53 2005 UTC vs.
Revision 1.18 by pcg, Thu Aug 7 17:30:27 2008 UTC

 get request timeouts. The default of C<8> means that the DNS transport
 will resend the request when no reply has been received for longer than
 eight times the minimum (= expected) latency, assuming the request or
 reply has been lost.
-For congested links a higher value might be necessary (e.g. C<30>). If the
+For congested links a higher value might be necessary (e.g. C<30>). If
-link is very stable lower values (e.g. C<2>) might work nicely. Values
+the link is very stable lower values (e.g. C<2>) might work
-near or below C<1> makes no sense whatsoever.
+nicely. Values near or below C<1> makes no sense whatsoever.
-The default should be working ok for most links.
+The default should be working ok for most links but will result in low
+throughput if packet loss is high.
 =item if-up = relative-or-absolute-path
 Sets the path of a script that should be called immediately after the
 network interface is initialized (but not neccessarily up). The following
 =head2 NODE SPECIFIC SETTINGS
 The following settings are node-specific, that is, every node can have
 different settings, even within the same gvpe instance. Settings that are
-executed before the first node section set the defaults, settings that are
+set before the first node section set the defaults, settings that are
-executed within a node section only apply to the given node.
+set within a node section only apply to the given node.
 =over 4
+=item allow-direct = nodename
+Allow direct connections to this node. See C<deny-direct> for more info.
 =item compress = yes|true|on | no|false|off
 Wether to compress data packets sent to this host (default: C<yes>).
 Compression is really cheap even on slow computers and has no size
 =item connect = ondemand | never | always | disabled
 Sets the connect mode (default: C<always>). It can be C<always> (always
 try to establish and keep a connection to the given host), C<never>
 (never initiate a connection to the given host, but accept connections),
-C<ondemand> (try to establish a connection on the first packet sent, and
+C<ondemand> (try to establish a connection when there are outstanding
-take it down after the keepalive interval) or C<disabled> (node is bad,
+packets in the queue and take it down after the keepalive interval) or
-don't talk to it).
+C<disabled> (node is bad, don't talk to it).
+=item deny-direct = nodename | *
+Deny direct connections to the specified node (or all nodes when C<*>
+is given). Only one node can be specified, but you can use multiple
+C<allow-direct> and C<deny-direct> statements. This only makes sense in
+networks with routers, as routers are required for indirect connections.
+Sometimes, a node cannot reach some other nodes for reasons of network
+connectivity. For example, a node behind a firewall that only allows
+conenctions to/from a single other node in the network. In this case one
+should specify C<deny-direct = *> and C<allow-direct = othernodename> (the other
+node I<must> be a router for this to work).
+The algorithm to check wether a connection may be direct is as follows:
+1. Other node mentioned in a C<allow-direct>? If yes, allow the connection.
+2. Other node mentioned in a C<deny-direct>? If yes, deny direct connections.
+3. Allow the connection.
+That is, C<allow-direct> takes precedence over C<deny-direct>.
+The check is done in both directions, i.e. both nodes must allow a direct
+connection before one is attempted, so you only need to specify connect
+limitations on one node.
 =item dns-domain = domain-suffix
 The DNS domain suffix that points to the DNS tunnel server for this node.
 protocol is enabled automatically).
 NOTE: Please specify C<enable-udp = yes> if you want t use it even though
 it might get switched on automatically, as some future version might
 default to another default protocol.
+=item hostname = hostname | ip    [can not be defaulted]
+Forces the address of this node to be set to the given dns hostname or ip
+address. It will be resolved before each connect request, so dyndns should
+work fine. If this setting is not specified and a router is available,
+then the router will be queried for the address of this node. Otherwise,
+the connection attempt will fail.
 =item icmp-type = integer
 Sets the type value to be used for outgoing (and incoming) packets sent
 via the ICMP transport.
 retries to establish a connection to this node. When a connection cannot
 be established, gvpe uses exponential backoff capped at this value. It's
 sometimes useful to set this to a much lower value (e.g. C<120>) on
 connections to routers that usually are stable but sometimes are down, to
 assure quick reconnections even after longer downtimes.
+=item max-ttl = seconds
+Expire packets that couldn't be sent after this many seconds
+(default: C<60>). Gvpe will normally queue packets for a node without an
+active connection, in the hope of establishing a connection soon. This
+value specifies the maximum lifetime a packet will stay in the queue, if a
+packet gets older, it will be thrown away.
+=item max-queue = positive-number
+The maximum number of packets that will be queued (default: C<512>)
+for this node. If more packets are sent then earlier packets will be
+expired. See C<max-ttl>, above.
 =item router-priority = 0 | 1 | positive-number>=2
 Sets the router priority of the given host (default: C<0>, disabled). If
 some host tries to connect to another host without a hostname, it asks

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/doc/gvpe.conf.5.pod (file contents): Revision 1.14 by pcg, Tue Jun 21 08:46:53 2005 UTC vs. Revision 1.18 by pcg, Thu Aug 7 17:30:27 2008 UTC

Diff Legend

Comparing gvpe/doc/gvpe.conf.5.pod (file contents):
Revision 1.14 by pcg, Tue Jun 21 08:46:53 2005 UTC vs.
Revision 1.18 by pcg, Thu Aug 7 17:30:27 2008 UTC