dpdk_tx_queue_size option. Previously, the tx queue length of the TAP device was unconditionally set to 256, which VMware VMXNET3 Ethernet Controller complained about: ETHDEV: Invalid value for nb_tx_desc(=256), should be: <= 4096, >= 512, and a product of 1stat storage ip4 detail outputs statistics on bucket filling in the IPv4 node storagebras_disable_l3_auth option — explicit prohibition of L3 auth in L2 BNG mode for all subscribers. For example, only DHCP authorization will work for subscribers with AS local meta. Default value: off (L3 auth is allowed) bras_disable_l3_auth=off. This option makes sense only if enable_auth=1. The option is incompatible with bras_dhcp_auth_mix=0: if bras_dhcp_auth_mix=0 is set, then bras_disable_l3_auth is assumed to be off (L3 auth is allowed) and a warning is printed to the alert log.disable_l3_auth=[1:0] was added to the subs prop set command (1 — prohibit L3 auth, 0 — allow). By default, L3 auth is allowed.ip_filter_source_as_flags (hot)[hot] — filtering subs traffic by AS. Bitmask of AS (autonomous systems) flags for the source IP from the subs side.ip_filter_source_as_flags=0x0ppp show stat commandVasExperts-Policing-Profile attribute with the BR## prefixnoname) user profile for services from parameters passed in the VasExperts-Service-Profile attribute with the BP## prefixrating_group_count — number of rating groups, 0 — RG disabled. Default: 0rating_group_max_subs — max number of subscribers with RG. Default: 0 (RG disabled)32 * rating_group_count * rating_group_max_subs * num_thread
For example, for 10k subscribers, 256 RG, and 8 processing threads, 625M of memory is required:
rating_group_count = 256 rating_group_max_subs = 10000 num_thread = 8 memory_required= 32 * 256 * 10000 * 8 = 625M
VasExperts-Acct-Type (id=28, vendor 43823, integer) with values:0: standard Interim Update Accounting1: RG data VasExperts-Acct-Rating-Group (new short attribute, 16-bit integer) - RG number;VasExperts-Acct-Input-Octets-64VasExperts-Acct-Output-Octets-64VasExperts-Acct-Input-Packets-64VasExperts-Acct-Output-Packets-64acct_swap_dir option (as in Accounting). subs traffic stat. For the specified subscriber, the command outputs billing statistics and rating group statistics, if they are enabled for the subscriber.VasExperts-Service-Profile :="9:RG"
If service 9 is disabled, RG accumulation is disabled as well.
Examples for service 9 and RG:
# service 9 enabled, RG disabled. Standard RADIUS Accounting is sent. VasExperts-Enable-Service :="9:on"
# service 9 enabled, RG enabled. RG data is sent in RADIUS Accounting. VasExperts-Service-Profile :="9:RG"
# service 9 disabled, RG disabled. Standard RADIUS Accounting and RG are not sent. VasExperts-Enable-Service :="9:off"
rx_dispatcher=3 — a method with even load balancing across an arbitrary number of threads with NAT 1:1 support requiring assignment of specific addresses.fdpi_ctrl list status --service 11 --login UserName (--ip IP) command. Additional fields were added to the output: active_sess_tcp — number of active NAT translations for TCP and active_sess_udp — number of active NAT translations for UDP.nat show <internal_ip> [<lifetime>] command. Outputs a list of all NAT translations for the specified private IP. A translation record looks like:<lifetime> (in seconds) is specified, its value is used as the translation lifetime.nat showsubs bind show command to view the list of IP addresses bound to the login <login>:subs bind show <login> [memory|udr]
Two modes:
memory (default) outputs the IP-to-login binding as it is currently configured in fastDPI.udr — outputs the IP-to-login binding from UDRcli framed route ?stat http. This command outputs internal statistics similar to the output in fastdpi_stat.log:VasExperts-L2-User=1).bras_subs_shcv_interval — inactivity interval, seconds; 0 - SHCV disabled.bras_subs_shcv_retry_timeout — ARP request response wait time, seconds; default = 3 seconds.bras_subs_shcv_retry_count — number of ARP requests; default = 3.bras_shcv_trace — SHCV tracing; default = off.bras_subs_shcv_interval seconds, fastDPI starts pinging the subscriber by sending a unicast ARP request on behalf of the subscriber gateway. Waiting for an ARP reply is bras_subs_shcv_retry_timeout seconds. If no reply is received for bras_subs_shcv_retry_count consecutive ARP requests, or the ARP reply contains a different MAC, the subscriber is considered inactive, their authorization status is reset, and the accounting session is stopped.2 and 4 are now available for the bras_dhcp_check_secondary_keys option. Full option description:bras_dhcp_check_secondary_keys — control of secondary unique keys (opt82/QinQ) [hot]0 (default) — do not control secondary keys.1 — control all secondary keys — QinQ and opt822 — control opt82 only4 — control QinQ onlysyslog_level in fdpi_radius.conf — the log level for writing messages from the alert log to syslog. 0 — syslog logging is disabled (default).tethering_ttl_allowed = 128:64 [hot] defines the list of allowed TTL values for subscriber traffic that are not considered tethering. Values are listed separated by ':'. Up to 256 values (0-255). Descriptionservice_flags - information about tags assigned to a flow in DPI. Detected tethering is reported in IPFIX in bit 1 of the service_flags field. 63 bits are available for future use. detection_flags - reserved for the detection method. action_flags - reserved to indicate what actions were applied to the flow.