Added support for cgroups

This commit is contained in:
Nikos Mavrogiannopoulos
2013-12-10 11:05:26 +01:00
parent fd25969aca
commit c6a08db6db
8 changed files with 99 additions and 17 deletions

View File

@@ -134,6 +134,17 @@ socket-file = /var/run/ocserv-socket
run-as-user = nobody
run-as-group = nobody
# Set the protocol-defined priority (SO_PRIORITY) for packets to
# be sent. That is a number from 0 to 6 with 0 being the lowest
# priority. Alternatively this can be used to set the IP Type-
# Of-Service, by setting it to a hexadecimal number (e.g., 0x20).
# This can be set per user/group or globally.
#net-priority = 3
# Set the VPN worker process into a specific cgroup. This is Linux
# specific and can be set per user/group or globally.
#cgroup = "cpuset,cpu:test"
# Network settings
device = vpns
@@ -173,13 +184,6 @@ ping-leases = false
# Setting it higher will improve throughput.
output-buffer = 10
# Set the protocol-defined priority (SO_PRIORITY) for packets to
# be sent. That is a number from 0 to 6 with 0 being the lowest
# priority. Alternatively this can be used to set the IP Type-
# Of-Service, by setting it to a hexadecimal number (e.g., 0x20).
# This can be set per user/group or globally.
#net-priority = 3
route = 192.168.1.0/255.255.255.0
#route = 192.168.5.0/255.255.255.0
@@ -196,6 +200,7 @@ route = 192.168.1.0/255.255.255.0
config-per-user = /etc/ocserv/config-per-user/
config-per-group = /etc/ocserv/config-per-group/
# The system command to use to setup a route. %R will be replaced with the
# route/mask and %D with the (tun) device.
#