require(library config.click); /* * Size of authenticated IP table for TCP, DNS, HTTP, and SSL. * Must be a power of two. Recommended fill factor, 75 %. * That is: sie of 131072 is enough for ~100K authenticated IPs. */ define($tcp_flood_cache_size 131072); /* * Size of tracked TCP sessions table (LCON and SLOW countermeasures). * Must be a power of two. Size of 1048576 is enough for ~1M connections. */ define($tcpconntable_size 1048576); /* Core 3 processes traffic (is a worker core). * List or range syntax is supported, for example: * * wlcores::Lcores(2,4,6,8-12); */ wlcores::Lcores(3); /* * Mitigator-controlled network ports. Must come in pairs of `extN`, `intN` * (external network port, internal network port). With odd number of ports, * there would be one extra `ext*` port. */ ext0::Port(0000:00:06.0); int0::Port(0000:00:07.0); /* * Cores 1 and 2 read traffic from ports `ext0` and `int0`, respectively. * One core may handle multiple ports (a common case for VMs): * * Lcore(1, ext0, int0); */ Lcore(1, ext0); Lcore(2, int0); Lcore(wlcores, router);