mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 08:14:42 +00:00
Johnathan Corgan
5ab05a5f30
Log a warning when the kernel clamps SO_RCVBUF or SO_SNDBUF below the requested size, directing the operator to increase rmem_max or wmem_max. Document buffer size defaults and sysctl requirements in the Docker config template.
30 lines
628 B
YAML
30 lines
628 B
YAML
# FIPS Node {{NODE_NAME}} configuration ({{TOPOLOGY}} topology)
|
|
#
|
|
# Identity: {{NPUB}}
|
|
|
|
node:
|
|
identity:
|
|
nsec: "{{NSEC}}"
|
|
|
|
tun:
|
|
enabled: true
|
|
name: fips0
|
|
mtu: 1280
|
|
|
|
dns:
|
|
enabled: true
|
|
bind_addr: "127.0.0.1"
|
|
|
|
transports:
|
|
udp:
|
|
bind_addr: "0.0.0.0:4000"
|
|
mtu: 1472
|
|
# recv_buf_size: 2097152 # 2 MB (default)
|
|
# send_buf_size: 2097152 # 2 MB (default)
|
|
# Note: The kernel clamps socket buffers to net.core.rmem_max / wmem_max.
|
|
# Ensure these sysctls are >= the configured buffer sizes:
|
|
# sysctl -w net.core.rmem_max=2097152
|
|
# sysctl -w net.core.wmem_max=2097152
|
|
|
|
peers:
|
|
{{PEERS}} |