| … | |
… | |
| 37 | #include <openssl/rsa.h> |
37 | #include <openssl/rsa.h> |
| 38 | |
38 | |
| 39 | #include "slog.h" |
39 | #include "slog.h" |
| 40 | #include "global.h" |
40 | #include "global.h" |
| 41 | |
41 | |
| 42 | #define DEFAULT_REKEY 3600 |
42 | #define DEFAULT_REKEY 3607 // interval between rekeys |
|
|
43 | #define DEFAULT_RESEED 3613 // interval between rng reseeds |
| 43 | #define DEFAULT_KEEPALIVE 60 // one keepalive/minute (it's just 8 bytes...) |
44 | #define DEFAULT_KEEPALIVE 60 // one keepalive/minute (it's just 8 bytes...) |
| 44 | #define DEFAULT_UDPPORT 655 // same as tinc, conflicts would be rare |
45 | #define DEFAULT_UDPPORT 655 // same as tinc, conflicts would be rare |
| 45 | #define DEFAULT_MTU 1500 // let's ether-net |
46 | #define DEFAULT_MTU 1500 // let's ether-net |
| 46 | #define DEFAULT_MAX_RETRY 3600 // retry at least this often |
47 | #define DEFAULT_MAX_RETRY 3600 // retry at least this often |
| 47 | #define DEFAULT_MAX_TTL 60 // packets expire after this many seconds |
48 | #define DEFAULT_MAX_TTL 60 // packets expire after this many seconds |
| 48 | #define DEFAULT_MAX_QUEUE 512 // never queue more than this many packets |
49 | #define DEFAULT_MAX_QUEUE 512 // never queue more than this many packets |
| 49 | |
50 | |
| 50 | #define DEFAULT_DNS_TIMEOUT_FACTOR 8.F // initial retry timeout multiple |
51 | #define DEFAULT_DNS_TIMEOUT_FACTOR 8.F // initial retry timeout multiple |
| 51 | #define DEFAULT_DNS_SEND_INTERVAL .01F // minimum send interval |
52 | #define DEFAULT_DNS_SEND_INTERVAL .01F // minimum send interval |
| 52 | #define DEFAULT_DNS_OVERLAP_FACTOR .5F // RTT * LATENCY_FACTOR == sending rate |
53 | #define DEFAULT_DNS_OVERLAP_FACTOR .5F // RTT * LATENCY_FACTOR == sending rate |
| 53 | #define DEFAULT_DNS_MAX_OUTSTANDING 100 // max. number of outstanding requests |
54 | #define DEFAULT_DNS_MAX_OUTSTANDING 100 // max. number of outstanding requests |
| … | |
… | |
| 122 | { |
123 | { |
| 123 | typedef vector<conf_node *> node_vector; |
124 | typedef vector<conf_node *> node_vector; |
| 124 | node_vector nodes; |
125 | node_vector nodes; |
| 125 | conf_node default_node; |
126 | conf_node default_node; |
| 126 | conf_node *thisnode; |
127 | conf_node *thisnode; |
|
|
128 | char *seed_dev; // the randomd evice to use for seeding |
|
|
129 | double reseed; // the interval between additional seeds |
| 127 | int mtu; // the mtu used for outgoing tunnel packets |
130 | int mtu; // the mtu used for outgoing tunnel packets |
| 128 | int nfmark; // the SO_MARK // netfilter mark // fwmark |
131 | int nfmark; // the SO_MARK // netfilter mark // fwmark |
| 129 | double rekey; // rekey interval |
132 | double rekey; // rekey interval |
| 130 | double keepalive; // keepalive probes interval |
133 | double keepalive; // keepalive probes interval |
| 131 | char *ifname; // the interface name (tap0 ...) |
134 | char *ifname; // the interface name (tap0 ...) |
| 132 | bool ifpersist; // should the interface be persistent |
135 | bool ifpersist; // should the interface be persistent |
| 133 | char *prikeyfile; |
136 | char *prikeyfile; |
| 134 | RSA *rsa_key; // our private rsa key |
137 | RSA *rsa_key; // our private rsa key |
| 135 | loglevel llevel; |
138 | loglevel llevel; |
| 136 | u8 ip_proto; // the ip protocol to use |
139 | u8 ip_proto; // the ip protocol to use |
| 137 | #if 1//D2 |
140 | uid_t change_uid; // the uid of the user to switch to, or 0 |
| 138 | u8 ip2_proto; // the ip protocol to use |
141 | gid_t change_gid; // the gid of the user to switch to, or 0 |
| 139 | #endif |
142 | char *change_root;// the path to chroot to, "/" == anonymous |
| 140 | #if ENABLE_ICMP |
143 | #if ENABLE_ICMP |
| 141 | u8 icmp_type; // the icmp type for the icmp-protocol |
144 | u8 icmp_type; // the icmp type for the icmp-protocol |
| 142 | #endif |
145 | #endif |
| 143 | |
146 | |
| 144 | char *script_if_up; |
147 | char *script_if_up; |
