mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-10-10 08:12:03 +08:00
Nikos Mavrogiannopoulos
a33370ad93
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
55 lines
952 B
Plaintext
55 lines
952 B
Plaintext
auth = "plain[@SRCDIR@/data/test1.passwd]"
|
|
|
|
isolate-workers = @ISOLATE_WORKERS@
|
|
|
|
max-ban-score = 0
|
|
|
|
use-dbus = no
|
|
|
|
max-clients = 16
|
|
|
|
listen-proxy-proto = false
|
|
|
|
max-same-clients = 2
|
|
|
|
tcp-port = @PORT@
|
|
udp-port = @PORT@
|
|
|
|
keepalive = 32400
|
|
|
|
dpd = 440
|
|
|
|
try-mtu-discovery = false
|
|
|
|
server-cert = @SRCDIR@/certs/server-cert.pem
|
|
server-key = @SRCDIR@/certs/server-key.pem
|
|
|
|
tls-priorities = "PERFORMANCE:%SERVER_PRECEDENCE:%COMPAT"
|
|
|
|
auth-timeout = 40
|
|
|
|
socket-file = ./ocserv-socket
|
|
|
|
occtl-socket-file = @OCCTL_SOCKET@
|
|
use-occtl = true
|
|
|
|
run-as-user = @USERNAME@
|
|
run-as-group = @GROUP@
|
|
|
|
device = vpns
|
|
|
|
default-domain = example.com
|
|
|
|
ipv4-network = @VPNNET@
|
|
ipv4-dns = 192.168.1.1
|
|
|
|
ipv6-network = @VPNNET6@
|
|
|
|
ping-leases = false
|
|
|
|
# Limit to 100 KB/s in each direction. On a loopback/namespace link
|
|
# unthrottled iperf3 reaches hundreds of Mbits/s, so even a generous
|
|
# 5x tolerance gives a clear pass/fail signal.
|
|
rx-data-per-sec = 100000
|
|
tx-data-per-sec = 100000
|