This is an old revision of the document!
3 Configuration
DPI platform is configured by the file /etc/dpi/fastdpi.conf.
Configuring network interfaces to use:
The interfaces are configured by pairs "input" - "output". For further convenience we consider that "input" faces the internal network and "output" faces uplink. Each pair forms a network bridge. It is transparent on L2 level. The interfaces available for configuring have names in format dna<digit>.
Example 1
To create the following pairs, or bridges:
dna0 ←→ dna1
dna2 ←→ dna3
dna4 ←→ dna5
in_dev=dna0:dna2:dna4 out_dev=dna1:dna3:dna5
Example 2
The complete DPI configuration file to perform filtering by Federal Supervision Agency for Information Technologies and Communications and Department of Justice lists:
in_dev=dna0 out_dev=dna1 federal_black_list=true
During the system installation other important system settings could be made. It should not be deleted, and is subject to change only if you understand the consequences of what you are doing. Here are some of them:
#Scale factor is about 1 for every 1 Gigabit of bandwidth scale_factor=10 timeout_check_dev=0 #FDPI Control ctrl_port=29000 ctrl_dev=lo #Turn on UDP detection only_tcp=0 #Turn on UDR udr=1
Other configuration parameters deal with specific options and are placed in respective directories.
Notes:
in_dev and out_dev - are the "cold" parameters
federal_black_list - is the "hot" parameter
Please check the chapter administration for details.