| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| en:dpi:opt_cgnat:сgnat_settings [2024/10/14 11:08] – [Parameters and possible values] elena.krasnobryzh | en:dpi:opt_cgnat:сgnat_settings [2024/11/29 10:33] (current) – elena.krasnobryzh |
|---|
| | {{tag>Services "Service 11" NAT CG-NAT}} |
| ====== Settings and management ====== | ====== Settings and management ====== |
| {{indexmenu_n>2}} | {{indexmenu_n>2}} |
| | ''nat_private_cidr''\\ string | Specifies additional private address ranges in addition to the standard ranges((Standard ranges: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 100.64.0.0/10)).\\ Max: 4 ranges. | | | ''nat_private_cidr''\\ string | Specifies additional private address ranges in addition to the standard ranges((Standard ranges: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 100.64.0.0/10)).\\ Max: 4 ranges. | |
| | ''lifetime_flow''\\ integer | Specifies the short queue time in seconds for TCP SYN, FIN, UDP.\\ Default: 60. | | | ''lifetime_flow''\\ integer | Specifies the short queue time in seconds for TCP SYN, FIN, UDP.\\ Default: 60. | |
| | ''lifetime_flow_long''\\ integer | Specifies the long queue time in seconds for a TCP DATA established connection.\\ Default: 300. | | | ''lifetime_flow_long''\\ integer | Specifies the long queue time in seconds for a TCP DATA established connection. SSG controls flags in TCP connections (FIN, RST) when connections are closed and connections are put into a short queue.\\ Default: 300. | |
| | ''nat_whp_lifetime''\\ integer | Specifies the short queue time in seconds for NAT broadcast for TCP SYN, FIN, UDP. This parameter overrides ''lifetime_flow'' for NAT broadcasts only.\\ Default: 75. | | | ''nat_whp_lifetime''\\ integer | Specifies the short queue time in seconds for NAT broadcast for TCP SYN, FIN, UDP. This parameter overrides ''lifetime_flow'' for NAT broadcasts only. \\ Default: 75. | |
| | ''nat_whp_lifetime_long''\\ integer | Specifies the long queue time in seconds for NAT broadcast for a TCP DATA established connection. This parameter overrides ''lifetime_flow_long'' for NAT broadcasts only.\\ Default: 375. | | | ''nat_whp_lifetime_long''\\ integer | Specifies the long queue time in seconds for NAT broadcast for a TCP DATA established connection. This parameter overrides ''lifetime_flow_long'' for NAT broadcasts only. SSG controls flags in TCP connections (FIN, RST) when connections are closed and connections are put into a short queue.\\ Default: 375. | |
| | ''nat_transcode_cidr''\\ string\\ //Add in 12.0// | Specifies the CIDR of the operator's public addresses. \\ Only 2 CIDRs can be specified (in case of using more CIDRs, it is acceptable to specify a wider CIDR). The values are used when transcoding public -> private for NAT 1:1. Any public address can be assigned to a private address for NAT 1:1. | | | ''nat_transcode_cidr''\\ string\\ //Add in 12.0// | Specifies the CIDR of the operator's public addresses. \\ Only 2 CIDRs can be specified (in case of using more CIDRs, it is acceptable to specify a wider CIDR). The values are used when transcoding public -> private for NAT 1:1. Any public address can be assigned to a private address for NAT 1:1. | |
| | ''rx_dispatcher''\\ integer \\ //Add in 12.0// | The method of hashing flow by workflow.\\ Choices:\\ ''0'' --- previous method ← (default). ''(IP_SRC+IP_DST)%N ) & IP_MASK''\\ ''1'' --- a method with uniform balancing over an arbitrary number of flows **with** NAT 1:1 support with the requirement to assign specific addresses. ''(CRC(IP_SRC)%N+CRC(IP_DST)%N)%N''\\ ''2'' --- a method with uniform balancing over an arbitrary number of flows **without** NAT 1:1 support with the requirement to assign specific addresses. | | | ''rx_dispatcher''\\ integer \\ //Add in 12.0// | The method of hashing flow by workflow.\\ Choices:\\ ''0'' --- previous method ← (default). ''(IP_SRC+IP_DST)%N ) & IP_MASK''\\ ''1'' --- a method with uniform balancing over an arbitrary number of flows **with** NAT 1:1 support with the requirement to assign specific addresses. ''(CRC(IP_SRC)%N+CRC(IP_DST)%N)%N''\\ ''2'' --- a method with uniform balancing over an arbitrary number of flows **without** NAT 1:1 support with the requirement to assign specific addresses. | |
