diff options
Diffstat (limited to 'docs/configuration/reference.rst')
| -rw-r--r-- | docs/configuration/reference.rst | 1600 |
1 files changed, 1600 insertions, 0 deletions
diff --git a/docs/configuration/reference.rst b/docs/configuration/reference.rst new file mode 100644 index 00000000000..84b2fd75887 --- /dev/null +++ b/docs/configuration/reference.rst @@ -0,0 +1,1600 @@ +.. _configuration_reference: + +Configuration Reference +======================= + +Below is the list of some section names and their associated parameters. +This is not an exhaustive list, but should give you an idea of how VPP can be configured. + +For all of the configuration parameters search the source code for instances of +**VLIB_CONFIG_FUNCTION** and **VLIB_EARLY_CONFIG_FUNCTION**. + +For example, the invocation *'VLIB_CONFIG_FUNCTION (foo_config, "foo")'* will +cause the function *'foo_config'* to receive all parameters given in a +parameter block named "foo": "foo { arg1 arg2 arg3 ... }". + +The unix section +---------------- + +Configures VPP startup and behavior type attributes, as well and any OS based +attributes. + +.. code-block:: console + + unix { + nodaemon + log /var/log/vpp/vpp.log + full-coredump + cli-listen /run/vpp/cli.sock + gid vpp + } + +nodaemon +^^^^^^^^ + +Do not fork / background the vpp process. Typical when invoking VPP +applications from a process monitor. Set by default in the default +*'startup.conf'* file. + +.. code-block:: console + + nodaemon + +nosyslog +^^^^^^^^ + +Disable syslog and log errors to stderr instead. Typical when invoking +VPP applications from a process monitor like runit or daemontools that +pipe service's output to a dedicated log service, which will typically +attach a timestamp and rotate the logs as necessary. + +.. code-block:: console + + nosyslog + +interactive +^^^^^^^^^^^ + +Attach CLI to stdin/out and provide a debugging command line interface. + +.. code-block:: console + + interactive + +log <filename> +^^^^^^^^^^^^^^ + +Logs the startup configuration and all subsequent CLI commands in filename. +Very useful in situations where folks don't remember or can't be bothered +to include CLI commands in bug reports. The default *'startup.conf'* file +is to write to *'/var/log/vpp/vpp.log'*. + +In VPP 18.04, the default log file location was moved from '/tmp/vpp.log' +to '/var/log/vpp/vpp.log' . The VPP code is indifferent to the file location. +However, if SELinux is enabled, then the new location is required for the file +to be properly labeled. Check your local *'startup.conf'* file for the log file +location on your system. + +.. code-block:: console + + log /var/log/vpp/vpp-debug.log + +exec | startup-config <filename> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Read startup operational configuration from filename. The contents of the file +will be performed as though entered at the CLI. The two keywords are aliases +for the same function; if both are specified, only the last will have an effect. + +A file of CLI commands might look like: + +.. code-block:: console + + $ cat /usr/share/vpp/scripts/interface-up.txt + set interface state TenGigabitEthernet1/0/0 up + set interface state TenGigabitEthernet1/0/1 up + +Parameter Example: + +.. code-block:: console + + startup-config /usr/share/vpp/scripts/interface-up.txt + +gid <number | name> +^^^^^^^^^^^^^^^^^^^ + +Sets the effective group ID to the input group ID or group name of the calling +process. + +.. code-block:: console + + gid vpp + +full-coredump +^^^^^^^^^^^^^ + +Ask the Linux kernel to dump all memory-mapped address regions, instead of +just text+data+bss. + +.. code-block:: console + + full-coredump + +coredump-size unlimited | <n>G | <n>M | <n>K | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + + Set the maximum size of the coredump file. The input value can be set in + GB, MB, KB or bytes, or set to *'unlimited'*. + +.. code-block:: console + + coredump-size unlimited + +cli-listen <ipaddress:port> | <socket-path> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + + Bind the CLI to listen at address localhost on TCP port 5002. This will + accept an ipaddress:port pair or a filesystem path; in the latter case a + local Unix socket is opened instead. The default *'startup.conf'* file + is to open the socket *'/run/vpp/cli.sock'*. + +.. code-block:: console + + cli-listen localhost:5002 + cli-listen /run/vpp/cli.sock + +cli-line-mode +^^^^^^^^^^^^^ + + Disable character-by-character I/O on stdin. Useful when combined with, + for example, emacs M-x gud-gdb. + +.. code-block:: console + + cli-line-mode + +cli-prompt <string> +^^^^^^^^^^^^^^^^^^^ + + Configure the CLI prompt to be string. + +.. code-block:: console + + cli-prompt vpp-2 + +cli-history-limit <n> +^^^^^^^^^^^^^^^^^^^^^ + + Limit command history to <n> lines. A value of 0 disables command history. + Default value: 50 + +.. code-block:: console + + cli-history-limit 100 + +cli-no-banner +^^^^^^^^^^^^^ + + Disable the login banner on stdin and Telnet connections. + +.. code-block:: console + + cli-no-banner + +cli-no-pager +^^^^^^^^^^^^ + + Disable the output pager. + +.. code-block:: console + + cli-no-pager + +cli-pager-buffer-limit <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^ + + Limit pager buffer to <n> lines of output. A value of 0 disables the + pager. Default value: 100000 + +.. code-block:: console + + cli-pager-buffer-limit 5000 + +runtime-dir <dir> +^^^^^^^^^^^^^^^^^ + + Set the runtime directory, which is the default location for certain + files, like socket files. Default is based on User ID used to start VPP. + Typically it is *'root'*, which defaults to *'/run/vpp/'*. Otherwise, + defaults to *'/run/user/<uid>/vpp/'*. + +.. code-block:: console + + runtime-dir /tmp/vpp + +poll-sleep-usec <n> +^^^^^^^^^^^^^^^^^^^ + + Add a fixed-sleep between main loop poll. Default is 0, which is not to + sleep. + +.. code-block:: console + + poll-sleep-usec 100 + +pidfile <filename> +^^^^^^^^^^^^^^^^^^ + + Writes the pid of the main thread in the given filename. + +.. code-block:: console + + pidfile /run/vpp/vpp1.pid + + +The api-trace Section +--------------------- + +The ability to trace, dump, and replay control-plane API traces makes all the +difference in the world when trying to understand what the control-plane has +tried to ask the forwarding-plane to do. + +Typically, one simply enables the API message trace scheme: + +.. code-block:: console + + api-trace { + api-trace on + } + +on | enable +^^^^^^^^^^^ + + Enable API trace capture from the beginning of time, and arrange for a + post-mortem dump of the API trace if the application terminates abnormally. + By default, the (circular) trace buffer will be configured to capture + 256K traces. The default *'startup.conf'* file has trace enabled by default, + and unless there is a very strong reason, it should remain enabled. + +.. code-block:: console + + on + +nitems <n> +^^^^^^^^^^ + + Configure the circular trace buffer to contain the last <n> entries. By + default, the trace buffer captures the last 256K API messages received. + +.. code-block:: console + + nitems 524288 + +save-api-table <filename> +^^^^^^^^^^^^^^^^^^^^^^^^^ + + Dumps the API message table to /tmp/<filename>. + +.. code-block:: console + + save-api-table apiTrace-07-04.txt + + +The api-segment Section +----------------------- + +These values control various aspects of the binary API interface to VPP. + +The default looks like the following: + +.. code-block:: console + + api-segment { + gid vpp + } + + +prefix <path> +^^^^^^^^^^^^^ + + Sets the prefix prepended to the name used for shared memory (SHM) + segments. The default is empty, meaning shared memory segments are created + directly in the SHM directory *'/dev/shm'*. It is worth noting that on + many systems *'/dev/shm'* is a symbolic link to somewhere else in the file + system; Ubuntu links it to *'/run/shm'*. + +.. code-block:: console + + prefix /run/shm + +uid <number | name> +^^^^^^^^^^^^^^^^^^^ + + Sets the user ID or name that should be used to set the ownership of the + shared memory segments. Defaults to the same user that VPP is started + with, probably root. + +.. code-block:: console + + uid root + +gid <number | name> +^^^^^^^^^^^^^^^^^^^ + + Sets the group ID or name that should be used to set the ownership of the + shared memory segments. Defaults to the same group that VPP is started + with, probably root. + +.. code-block:: console + + gid vpp + +**The following parameters should only be set by those that are familiar with the +interworkings of VPP.** + +baseva <x> +^^^^^^^^^^ + + Set the base address for SVM global region. If not set, on AArch64, the + code will try to determine the base address. All other default to + 0x30000000. + +.. code-block:: console + + baseva 0x20000000 + +global-size <n>G | <n>M | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + + Set the global memory size, memory shared across all router instances, + packet buffers, etc. If not set, defaults to 64M. The input value can be + set in GB, MB or bytes. + +.. code-block:: console + + global-size 2G + +global-pvt-heap-size <n>M | size <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + + Set the size of the global VM private mheap. If not set, defaults to 128k. + The input value can be set in MB or bytes. + +.. code-block:: console + + global-pvt-heap-size size 262144 + +api-pvt-heap-size <n>M | size <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + + Set the size of the api private mheap. If not set, defaults to 128k. + The input value can be set in MB or bytes. + +.. code-block:: console + + api-pvt-heap-size 1M + +api-size <n>M | <n>G | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^ + + Set the size of the API region. If not set, defaults to 16M. The input + value can be set in GB, MB or bytes. + +.. code-block:: console + + api-size 64M + +The socksvr Section +------------------- + +Enables a Unix domain socket which processes binary API messages. See +.../vlibmemory/socket_api.c. If this parameter is not set, vpp +won't process binary API messages over sockets. + +.. code-block:: console + + socksvr { + # Explicitly name a socket file + socket-name /run/vpp/api.sock + or + # Use defaults as described below + default + } + +The "default" keyword instructs vpp to use /run/vpp/api.sock when +running as root, otherwise to use /run/user/<uid>/api.sock. + +The cpu Section +--------------- + +In the VPP there is one main thread and optionally the user can create worker(s) +The main thread and worker thread(s) can be pinned to CPU core(s) manually or automatically + +.. code-block:: console + + cpu { + main-core 1 + corelist-workers 2-3,18-19 + } + + +Manual pinning of thread(s) to CPU core(s) +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +main-core +^^^^^^^^^ + +Set logical CPU core where main thread runs, if main core is not set VPP will use +core 1 if available + +.. code-block:: console + + main-core 1 + +corelist-workers +^^^^^^^^^^^^^^^^ + +Set logical CPU core(s) where worker threads are running + +.. code-block:: console + + corelist-workers 2-3,18-19 + +Automatic pinning of thread(s) to CPU core(s) +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +skip-cores number +^^^^^^^^^^^^^^^^^ + +Sets number of CPU core(s) to be skipped (1 ... N-1), Skipped CPU core(s) are +not used for pinning main thread and working thread(s). + +The main thread is automatically pinned to the first available CPU core and worker(s) +are pinned to next free CPU core(s) after core assigned to main thread + +.. code-block:: console + + skip-cores 4 + +workers number +^^^^^^^^^^^^^^ + +Specify a number of workers to be created Workers are pinned to N consecutive +CPU cores while skipping "skip-cores" CPU core(s) and main thread's CPU core + +.. code-block:: console + + workers 2 + +scheduler-policy other | batch | idle | fifo | rr +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Set scheduling policy and priority of main and worker threads + +Scheduling policy options are: other (SCHED_OTHER), batch (SCHED_BATCH) +idle (SCHED_IDLE), fifo (SCHED_FIFO), rr (SCHED_RR) + +.. code-block:: console + + scheduler-policy fifo + +scheduler-priority number +^^^^^^^^^^^^^^^^^^^^^^^^^ + +Scheduling priority is used only for "real-time policies (fifo and rr), +and has to be in the range of priorities supported for a particular policy + +.. code-block:: console + + scheduler-priority 50 + +The buffers Section +------------------- + +.. code-block:: console + + buffers { + buffers-per-numa 128000 + default data-size 2048 + page-size default-hugepage + } + +buffers-per-numa number +^^^^^^^^^^^^^^^^^^^^^^^ + +Increase number of buffers allocated, needed only in scenarios with +large number of interfaces and worker threads. Value is per numa node. +Default is 16384 (8192 if running unprivileged) + +.. code-block:: console + + buffers-per-numa 128000 + +default data-size number +^^^^^^^^^^^^^^^^^^^^^^^^ + +Size of buffer data area, default is 2048 + +.. code-block:: console + + default data-size 2048 + +page-size number +^^^^^^^^^^^^^^^^ + +Set the page size for buffer allocation + +.. code-block:: console + + page-size 4K + page-size 2M + page-size 1G + page-size default + page-size default-hugepage + + +The dpdk Section +---------------- + +.. code-block:: console + + dpdk { + dev default { + num-rx-desc 512 + num-tx-desc 512 + } + + dev 0000:02:00.1 { + num-rx-queues 2 + name eth0 + } + } + +dev <pci-dev> | default { .. } +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +White-list [as in, attempt to drive] a specific PCI device. PCI-dev is a +string of the form "DDDD:BB:SS.F" where: + +* DDDD = Domain +* BB = Bus Number +* SS = Slot number +* F = Function + +If the keyword **default** is used the values will apply to all the devices. + +This is the same format used in the linux sysfs tree (i.e./sys/bus/pci/devices) +for PCI device directory names. + +.. code-block:: console + + dpdk { + dev default { + num-rx-desc 512 + num-tx-desc 512 + } + +dev <pci-dev> { .. } +^^^^^^^^^^^^^^^^^^^^ + +Whitelist specific interface by specifying PCI address. When whitelisting specific +interfaces by specifying PCI address, additional custom parameters can also be +specified. Valid options include: + +.. code-block:: console + + dev 0000:02:00.0 + dev 0000:03:00.0 + +blacklist <pci-dev> +^^^^^^^^^^^^^^^^^^^ + +Blacklist specific device type by specifying PCI vendor:device Whitelist entries +take precedence + +.. code-block:: console + + blacklist 8086:10fb + +name interface-name +^^^^^^^^^^^^^^^^^^^ + +Set interface name + +.. code-block:: console + + dev 0000:02:00.1 { + name eth0 + } + +num-rx-queues <n> +^^^^^^^^^^^^^^^^^ + +Number of receive queues. Also enables RSS. Default value is 1. + +.. code-block:: console + + dev 0000:02:00.1 { + num-rx-queues <n> + } + +num-tx-queues <n> +^^^^^^^^^^^^^^^^^ + +Number of transmit queues. Default is equal to number of worker threads +or 1 if no workers treads. + +.. code-block:: console + + dev 000:02:00.1 { + num-tx-queues <n> + } + +num-rx-desc <n> +^^^^^^^^^^^^^^^ + +Number of descriptors in receive ring. Increasing or reducing number +can impact performance. Default is 1024. + +.. code-block:: console + + dev 000:02:00.1 { + num-rx-desc <n> + } + +vlan-strip-offload on | off +^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +VLAN strip offload mode for interface. VLAN stripping is off by default +for all NICs except VICs, using ENIC driver, which has VLAN stripping on +by default. + +.. code-block:: console + + dev 000:02:00.1 { + vlan-strip-offload on|off + } + +uio-driver driver-name +^^^^^^^^^^^^^^^^^^^^^^ + +Change UIO driver used by VPP, Options are: igb_uio, vfio-pci, uio_pci_generic +or auto (default) + + +.. code-block:: console + + uio-driver vfio-pci + +no-multi-seg +^^^^^^^^^^^^ + +Disable multi-segment buffers, improves performance but disables Jumbo MTU support + +.. code-block:: console + + no-multi-seg + +socket-mem <n> +^^^^^^^^^^^^^^ + +Change hugepages allocation per-socket, needed only if there is need for +larger number of mbufs. Default is 256M on each detected CPU socket + +.. code-block:: console + + socket-mem 2048,2048 + +no-tx-checksum-offload +^^^^^^^^^^^^^^^^^^^^^^ + +Disables UDP / TCP TX checksum offload. Typically needed for use faster +vector PMDs (together with no-multi-seg) + +.. code-block:: console + + no-tx-checksum-offload + +enable-tcp-udp-checksum +^^^^^^^^^^^^^^^^^^^^^^^ + +Enable UDP / TCP TX checksum offload This is the reversed option of +'no-tx-checksum-offload' + +.. code-block:: console + + enable-tcp-udp-checksum + +The plugins Section +------------------- + +Configure VPP plugins. + +.. code-block:: console + + plugins { + path /ws/vpp/build-root/install-vpp-native/vpp/lib/vpp_plugins + plugin dpdk_plugin.so enable + } + +path pathname +^^^^^^^^^^^^^ + +Adjust the plugin path depending on where the VPP plugins are. + +.. code-block:: console + + path /ws/vpp/build-root/install-vpp-native/vpp/lib/vpp_plugins + +plugin plugin-name | default enable | disable +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Disable all plugins by default and then selectively enable specific plugins + +.. code-block:: console + + plugin default disable + plugin dpdk_plugin.so enable + plugin acl_plugin.so enable + +Enable all plugins by default and then selectively disable specific plugins + +.. code-block:: console + + plugin dpdk_plugin.so disable + plugin acl_plugin.so disable + +Th statseg Section +^^^^^^^^^^^^^^^^^^ + +.. code-block:: console + + statseg { + per-node-counters on + } + +socket-name <filename> +^^^^^^^^^^^^^^^^^^^^^^ + +Name of the stats segment socket defaults to /run/vpp/stats.sock. + +.. code-block:: console + + socket-name /run/vpp/stats.sock + +size <nnn>[KMG] +^^^^^^^^^^^^^^^ + +The size of the stats segment, defaults to 32mb + +.. code-block:: console + + size 1024M + +per-node-counters on | off +^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Defaults to none + +.. code-block:: console + + per-node-counters on + +update-interval <f64-seconds> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the segment scrape / update interval + +.. code-block:: console + + update-interval 300 + + +Some Advanced Parameters: +------------------------- + + +acl-plugin Section +------------------ + +These parameters change the configuration of the ACL (access control list) plugin, +such as how the ACL bi-hash tables are initialized. + +They should only be set by those that are familiar with the interworkings of VPP +and the ACL Plugin. + +The first three parameters, *connection hash buckets*, *connection hash memory*, +and *connection count max*, set the **connection table per-interface parameters** +for modifying how the two bounded-index extensible hash tables for +IPv6 (40\*8 bit key and 8\*8 bit value pairs) and IPv4 +(16\*8 bit key and 8\*8 bit value pairs) **ACL plugin FA interface sessions** +are initialized. + +connection hash buckets <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of hash buckets (rounded up to a power of 2) in each +of the two bi-hash tables. Defaults to 64\*1024 (65536) hash buckets. + +.. code-block:: console + + connection hash buckets 65536 + +connection hash memory <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the allocated memory size (in bytes) for each of the two bi-hash tables. +Defaults to 1073741824 bytes. + +.. code-block:: console + + connection hash memory 1073741824 + +connection count max <n> +^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the maximum number of pool elements when allocating each per-worker +pool of sessions for both bi-hash tables. Defaults to 500000 elements in each pool. + +.. code-block:: console + + connection count max 500000 + +main heap size <n>G | <n>M | <n>K | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the size of the main memory heap that holds all the ACL module related +allocations (other than hash.) Default size is 0, but during +ACL heap initialization is equal to +*per_worker_size_with_slack * tm->n_vlib_mains + bihash_size + main_slack*. +Note that these variables are partially based on the +**connection table per-interface parameters** mentioned above. + +.. code-block:: console + + main heap size 3G + +The next three parameters, *hash lookup heap size*, *hash lookup hash buckets*, +and *hash lookup hash memory*, modify the initialization of the bi-hash lookup +table used by the ACL plugin. This table is initialized when attempting to apply +an ACL to the existing vector of ACLs looked up during packet processing +(but it is found that the table does not exist / has not been initialized yet.) + +hash lookup heap size <n>G | <n>M | <n> K | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the size of the memory heap that holds all the miscellaneous allocations +related to hash-based lookups. Default size is 67108864 bytes. + +.. code-block:: console + + hash lookup heap size 70M + +hash lookup hash buckets <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of hash buckets (rounded up to a power of 2) in the bi-hash +lookup table. Defaults to 65536 hash buckets. + +.. code-block:: console + + hash lookup hash buckets 65536 + +hash lookup hash memory <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the allocated memory size (in bytes) for the bi-hash lookup table. +Defaults to 67108864 bytes. + +.. code-block:: console + + hash lookup hash memory 67108864 + +use tuple merge <n> +^^^^^^^^^^^^^^^^^^^ + +Sets a boolean value indicating whether or not to use TupleMerge +for hash ACL's. Defaults to 1 (true), meaning the default implementation +of hashing ACL's does use TupleMerge. + +.. code-block:: console + + use tuple merge 1 + +tuple merge split threshold <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the maximum amount of rules (ACE's) that can collide in a bi-hash +lookup table before the table is split into two new tables. Splitting ensures +less rule collisions by hashing colliding rules based on their common tuple +(usually their maximum common tuple.) Splitting occurs when the +*length of the colliding rules vector* is greater than this threshold amount. +Defaults to a maximum of 39 rule collisions per table. + +.. code-block:: console + + tuple merge split threshold 30 + +reclassify sessions <n> +^^^^^^^^^^^^^^^^^^^^^^^ + +Sets a boolean value indicating whether or not to take the epoch of the session +into account when dealing with re-applying ACL's or changing already applied ACL's. +Defaults to 0 (false), meaning the default implementation does NOT take the +epoch of the session into account. + +.. code-block:: console + + reclassify sessions 1 + +.. _api-queue: + +api-queue Section +----------------- + +length <n> +^^^^^^^^^^^ + +Sets the api queue length. Minimum valid queue length is 1024, which is +also the default. + +.. code-block:: console + + length 2048 + +.. _cj: + +cj Section +---------- + +The circular journal (CJ) thread-safe circular log buffer scheme is +occasionally useful when chasing bugs. Calls to it should not be checked in. +See .../vlib/vlib/unix/cj.c. The circular journal is disables by default. +When enabled, the number of records must be provided, there is no default +value. + +records <n> +^^^^^^^^^^^ + +Configure the number of circular journal records in the circular buffer. +The number of records should be a power of 2. + +.. code-block:: console + + records 131072 + +on +^^ + +Turns on logging at the earliest possible moment. + +.. code-block:: console + + on + +dns Section +----------- + +max-cache-size <n> +^^^^^^^^^^^^^^^^^^ + +Set the maximum number of active elements allowed in the pool of +dns cache entries. When resolving an expired entry or adding a new +static entry and the max number of active entries is reached, +a random, non-static entry is deleted. Defaults to 65535 entries. + +.. code-block:: console + + max-cache-size 65535 + + +ethernet Section +----------------- + +default-mtu <n> +^^^^^^^^^^^^^^^ + +Specifies the default MTU size for Ethernet interfaces. Must be in +the range of 64-9000. The default is 9000. + +.. code-block:: console + + default-mtu 1500 + +heapsize Section +----------------- + +Heapsize configuration controls the size of the main heap. The heap size is +configured very early in the boot sequence, before loading plug-ins or doing +much of anything else. + +heapsize <n>M | <n>G +^^^^^^^^^^^^^^^^^^^^ + +Specifies the size of the heap in MB or GB. The default is 1GB. + +.. code-block:: console + + heapsize 2G + +ip Section +---------- + +IPv4 heap configuration. he heap size is configured very early in the boot +sequence, before loading plug-ins or doing much of anything else. + +heap-size <n>G | <n>M | <n>K | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Set the IPv4 mtrie heap size, which is the amount of memory dedicated to +the destination IP lookup table. The input value can be set in GB, MB, KB +or bytes. The default value is 32MB. + +.. code-block:: console + + heap-size 64M + +ip6 Section +----------- + +IPv6 heap configuration. he heap size is configured very early in the boot +sequence, before loading plug-ins or doing much of anything else. + + +heap-size <n>G | <n>M | <n>K | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Set the IPv6 forwarding table heap size. The input value can be set in GB, +MB, KB or bytes. The default value is 32MB. + +.. code-block:: console + + heap-size 64M + +hash-buckets <n> +^^^^^^^^^^^^^^^^ + +Set the number of IPv6 forwarding table hash buckets. The default value is +64K (65536). + +.. code-block:: console + + hash-buckets 131072 + +l2learn Section +--------------- + +Configure Layer 2 MAC Address learning parameters. + +limit <n> +^^^^^^^^^ + +Configures the number of L2 (MAC) addresses in the L2 FIB at any one time, +which limits the size of the L2 FIB to <n> concurrent entries. Defaults to +4M entries (4194304). + +.. code-block:: console + + limit 8388608 + +l2tp Section +------------ + +IPv6 Layer 2 Tunnelling Protocol Version 3 (IPv6-L2TPv3) configuration controls +the method used to locate a specific IPv6-L2TPv3 tunnel. The following settings +are mutually exclusive: + +lookup-v6-src +^^^^^^^^^^^^^ + +Lookup tunnel by IPv6 source address. + +.. code-block:: console + + lookup-v6-src + +lookup-v6-dst +^^^^^^^^^^^^^ + +Lookup tunnel by IPv6 destination address. + +.. code-block:: console + + lookup-v6-dst + +lookup-session-id +^^^^^^^^^^^^^^^^^ + +Lookup tunnel by L2TPv3 session identifier. + +.. code-block:: console + + lookup-session-id + +logging Section +--------------- + +size <n> +^^^^^^^^ + +Number of entries in the global logging buffer. Defaults to 512. + +.. code-block:: console + + size 512 + +nthrottle-time <n> +^^^^^^^^^^^^^^^^^^ + +Set the global value for the time to wait (in seconds) before resuming +logging of a log subclass that exceeded the per-subclass message-per-second +threshold. Defaults to 3. + +.. code-block:: console + + unthrottle-time 3 + +default-log-level emerg|alert | crit | err | warn | notice | info | debug | disabled +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Set the default logging level of the system log. Defaults to notice. + +.. code-block:: console + + default-log-level notice + +default-syslog-log-level emerg|alert | crit | err | warn | notice | info | debug | disabled +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Set the default logging level of the syslog target. Defaults to warning. + +.. code-block:: console + + default-syslog-log-level warning + +mactime Section +--------------- + +lookup-table-buckets <n> +^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of hash buckets in the mactime bi-hash lookup table. +Defaults to 128 buckets. + +.. code-block:: console + + lookup-table-buckets 128 + +lookup-table-memory <n>G | <n>M | <n>K | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the allocated memory size (in bytes) for the mactime bi-hash lookup table. +The input value can be set in GB, MB, KB or bytes. The default value is 262144 +(256 << 10) bytes or roughly 256KB. + +.. code-block:: console + + lookup-table-memory 300K + +timezone_offset <n> +^^^^^^^^^^^^^^^^^^^ + +Sets the timezone offset from UTC. Defaults to an offset of -5 hours +from UTC (US EST / EDT.) + +.. code-block:: console + + timezone_offset -5 + +"map" Parameters +---------------- + +customer edge +^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets a boolean true to indicate that the MAP node is a Customer Edge (CE) +router. The boolean defaults to false, meaning the MAP node is not treated +as a CE router. + +.. code-block:: console + + customer edge + +nat Section +----------- + +These parameters change the configuration of the NAT (Network address translation) +plugin, such as how the NAT & NAT64 bi-hash tables are initialized, if the NAT is +endpoint dependent, or if the NAT is deterministic. + +For each NAT per thread data, the following 4 parameters change how certain +bi-hash tables are initialized. + +translation hash buckets <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of hash buckets in each of the two in/out NAT bi-hash lookup +tables. Defaults to 1024 buckets. + +If the NAT is indicated to be endpoint dependent, which can be set with the +:ref:`endpoint-dependent parameter <endpointLabel>`, then this parameter sets +the number of hash buckets in each of the two endpoint dependent sessions +NAT bi-hash lookup tables. + +.. code-block:: console + + translation hash buckets 1024 + +translation hash memory <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the allocated memory size (in bytes) for each of the two in/out NAT +bi-hash tables. Defaults to 134217728 (128 << 20) bytes, which is roughly 128 MB. + +If the NAT is indicated to be endpoint dependent, which can be set with the +:ref:`endpoint-dependent parameter <endpointLabel>`, then this parameter sets the +allocated memory size for each of the two endpoint dependent sessions NAT bi-hash +lookup tables. + +.. code-block:: console + + translation hash memory 134217728 + +user hash buckets <n> +^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of hash buckets in the user bi-hash lookup table +(src address lookup for a user.) Defaults to 128 buckets. + +.. code-block:: console + + user hash buckets 128 + +user hash memory <n> +^^^^^^^^^^^^^^^^^^^^ + +Sets the allocated memory size (in bytes) for the user bi-hash lookup table +(src address lookup for a user.) Defaults to 67108864 (64 << 20) bytes, +which is roughly 64 MB. + +.. code-block:: console + + user hash memory 67108864 + +max translations per user <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the maximum amount of dynamic and/or static NAT sessions each user can have. +Defaults to 100. When this limit is reached, the least recently used translation +is recycled. + +.. code-block:: console + + max translations per user 50 + +deterministic +^^^^^^^^^^^^^ + +Sets a boolean value to 1 indicating that the NAT is deterministic. Defaults to 0, +meaning the NAT is not deterministic. + +.. code-block:: console + + deterministic + +nat64 bib hash buckets <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of hash buckets in each of the two in/out NAT64 BIB bi-hash +tables. Defaults to 1024 buckets. + +.. code-block:: console + + nat64 bib hash buckets 1024 + +nat64 bib hash memory <n> +^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the allocated memory size (in bytes) for each of the two in/out NAT64 +BIB bi-hash tables. Defaults to 134217728 (128 << 20) bytes, +which is roughly 128 MB. + +.. code-block:: console + + nat64 bib hash memory 134217728 + +nat64 st hash buckets <n> +^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of hash buckets in each of the two in/out NAT64 session table +bi-hash tables. Defaults to 2048 buckets. + +.. code-block:: console + + nat64 st hash buckets 2048 + +nat64 st hash memory <n> +^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the allocated memory size (in bytes) for each of the two in/out NAT64 session +table bi-hash tables. Defaults to 268435456 (256 << 20) bytes, which is roughly +256 MB. + +.. code-block:: console + + nat64 st hash memory 268435456 + +.. _endpointLabel: + +endpoint-dependent +^^^^^^^^^^^^^^^^^^ + +Sets a boolean value to 1, indicating that the NAT is endpoint dependent. +Defaults to 0, meaning the NAT is not endpoint dependent. + +.. code-block:: console + + endpoint-dependent + +oam Section +----------- + +OAM configuration controls the (ip4-icmp) interval, and number of misses +allowed before reporting an oam target down to any registered listener. + +interval <n.n> +^^^^^^^^^^^^^^ + +Interval, floating-point seconds, between sending OAM IPv4 ICMP messages. +Default is 2.04 seconds. + +.. code-block:: console + + interval 3.5 + +physmem Section +--------------- + +Configuration parameters used to specify base address and maximum size of +the memory allocated for the pmalloc module in VPP. pmalloc is a NUMA-aware, +growable physical memory allocator. pmalloc allocates memory for the DPDK +memory pool. + +base-addr <address> +^^^^^^^^^^^^^^^^^^^ + +Specify the base address for pmalloc memory space. + +.. code-block:: console + + base-addr 0xfffe00000000 + +max-size <n>G | <n>M | <n>K | <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Set the memory size for pmalloc memory space. The default is 16G. + +.. code-block:: console + + max-size 4G + +tapcli Section +-------------- + +Configuration parameters for TAPCLI (dynamic tap interface hookup.) + +mtu <n> +^^^^^^^ + +Sets interface MTU (maximum transmission unit) size in bytes. This size +is also related to the number of MTU buffers. Defaults to 1500 bytes. + +.. code-block:: console + + mtu 1500 + +disable +^^^^^^^ + +Disables TAPCLI. Default is that TAPCLI is enabled. + +.. code-block:: console + + disable + + +tcp Section +----------- + +Configuration parameters for TCP host stack utilities. The following +preallocation parameters are related to the initialization of fixed-size, +preallocation pools. + +preallocated-connections <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of preallocated TCP connections. Defaults to 0. +The preallocated connections per thread is related to this value, +equal to (preallocated_connections / (num_threads - 1)). + +.. code-block:: console + + preallocated-connections 5 + +preallocated-half-open-connections <n> +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the number of preallocated TCP half-open connections. Defaults to 0. + +.. code-block:: console + + preallocated-half-open-connections 5 + +buffer-fail-fraction <n.n> +^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the TCP buffer fail fraction (a float) used for fault-injection +when debugging TCP buffer allocation. Its use is found in *tcp_debug.h*. +Defaults to 0.0. + +.. code-block:: console + + buffer-fail-fraction 0.0 + + +tls Section +----------- + +Configures TLS parameters, such as enabling the use of test certificates. +These parameters affect the tlsmbedtls and tlsopenssl plugins. + +use-test-cert-in-ca +^^^^^^^^^^^^^^^^^^^ + +Sets a boolean value to 1 to indicate during the initialization of a +TLS CA chain to attempt to parse and add test certificates to the chain. +Defaults to 0, meaning test certificates are not used. + +.. code-block:: console + + use-test-cert-in-ca + +ca-cert-path <filename> +^^^^^^^^^^^^^^^^^^^^^^^ + +Sets the filename path of the location of TLS CA certificates, used when +initializing and loading TLS CA certificates during the initialization +of a TLS CA chain. If not set, the default filename path is +*/etc/ssl/certs/ca-certificates.crt*. + +.. code-block:: console + + ca-cert-path /etc/ssl/certs/ca-certificates.crt + + +tuntap Section +-------------- + +The "tuntap" driver configures a point-to-point interface between the vpp +engine and the local Linux kernel stack. This allows e.g. users to ssh to the +host | VM | container via vpp "revenue" interfaces. It's marginally useful, and +is currently disabled by default. To [dynamically] create TAP interfaces - the +preferred scheme - see the "tap_connect" binary API. The Linux network stack +"vnet" interface needs to manually configure, and VLAN and other settings if +desired. + + +enable|disable +^^^^^^^^^^^^^^ + +Enable or disable the tun/tap driver. + +.. code-block:: console + + enable + +ethernet|ether +^^^^^^^^^^^^^^ + +Create a tap device (ethernet MAC) instead of a tun device (point-to-point +tunnel). The two keywords are aliases for the same function. + +.. code-block:: console + + ethernet + +have-normal-interface|have-normal +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Treat the host Linux stack as a routing peer instead of programming VPP +interface L3 addresses onto the tun/tap devices. The two keywords are +aliases for the same function. + +.. code-block:: console + + have-normal-interface + +name <name> +^^^^^^^^^^^ + +Assign name to the tun/tap device. + +.. code-block:: console + + name vpp1 + + +vhost-user Section +------------------ + +Vhost-user configuration parameters control the vhost-user driver. + +coalesce-frames <n> +^^^^^^^^^^^^^^^^^^^ + +Subject to deadline-timer expiration - see next item - attempt to transmit +at least <n> packet frames. Default is 32 frames. + +.. code-block:: console + + coalesce-frames 64 + +coalesce-time <seconds> +^^^^^^^^^^^^^^^^^^^^^^^ + +Hold packets no longer than (floating-point) seconds before transmitting +them. Default is 0.001 seconds + +.. code-block:: console + + coalesce-time 0.002 + +dont-dump-memory +^^^^^^^^^^^^^^^^ + +vhost-user shared-memory segments can add up to a large amount of memory, so +it's handy to avoid adding them to corefiles when using a significant number +of such interfaces. + +.. code-block:: console + + dont-dump-memory + + +vlib Section +------------ + +These parameters configure VLIB, such as allowing you to choose whether to +enable memory traceback or a post-mortem elog dump. + +memory-trace +^^^^^^^^^^^^ + +Enables memory trace (mheap traceback.) Defaults to 0, meaning memory +trace is disabled. + +.. code-block:: console + + memory-trace + +elog-events <n> +^^^^^^^^^^^^^^^ + +Sets the number of elements/events (the size) of the event ring +(a circular buffer of events.) This number rounds to a power of 2. +Defaults to 131072 (128 << 10) elements. + +.. code-block:: console + + elog-events 4096 + +elog-post-mortem-dump +^^^^^^^^^^^^^^^^^^^^^ + +Enables the attempt of a post-mortem elog dump to +*/tmp/elog_post_mortem.<PID_OF_CALLING_PROCESS>* if os_panic or +os_exit is called. + +.. code-block:: console + + elog-post-mortem-dump |