chiark / gitweb /
init: Introduce the peer database.
[tripe] / peerdb / peers.in
CommitLineData
6005ef9b
MW
1;;; -*-conf-windows-*-
2;;;
3;;; Peers description file
4;;;
5;;; You're best off not editing this file at all; instead, drop a file
6;;; containing your overriden settings alongside.
7
8;;;--------------------------------------------------------------------------
9;;; Global defaults.
10;;;
11;;; The paramaters here affect all peer definitions. It mainly contains
12;;; information about the local site. You will need to customize it.
13
14[@GLOBAL]
15
16;; domain: the domain name for your VPN; used to form default tunnel
17;; addresses.
18domain = vpn.example.com
19
20;; myhost: my (internal) host name; used by the default laddr.
21myhost = thishost
22
23;; laddr: the local address for point-to-point interfaces.
24laddr = $[$(myhost).$(domain)]
25
26;; raddr: the remote address for point-to-point interfaces.
27raddr = $[$(name).$(domain)]
28
29;; ifname: the name to set on point-to-point interfaces.
30ifname = vpn-$(name)
31
32;; ifup: script to set up a tunnel interface ready for use. The installed
33;; script is good for Linux hosts.
34ifup = /usr/sbin/tripe-ifup
35
36;; every: interval for checking that this connection is alive.
37every = 2m
38
39;; timeout: how long to wait for a ping response before giving up.
40timeout = 10s
41
42;; retries: how many ping attempts to make before declaring the connection
43;; dead.
44retries = 5
45
46;;;--------------------------------------------------------------------------
47;;; Active-peers defaults.
48;;;
49;;; The parameters here affect both active and dynamic connections. The
50;;; defaults should be good for most sites, though you may wish to add extra
51;;; settings.
52
53[@ACTIVE]
54@inherit = @GLOBAL
55
56;; port: the port on which the peer's tripe(8) daemon is running. The
57;; default is the port officially allocated by IANA.
58port = 4070
59
60;; host: the external host name (or dotted-quad IP address) of the host
61;; running tripe(8). This should be overridden explicitly in each peer
62;; definition.
63host = override-me
64
65;; peer: the address specification (see tripe-admin(5)) to use to connect to
66;; the remote peer.
67peer = INET $[$(host)] $(port)
68
69;;;--------------------------------------------------------------------------
70;;; Dynamic-peers defaults.
71;;;
72;;; The parameters here affect peers to whom dynamic connections are made.
73;;; The user and connect parameters probably need customizing.
74
75[@DYNAMIC]
76@inherit = @ACTIVE
77
78;; cork: whether to wait for a key-exchange packet from the peer before
79;; sending one of our own.
80cork = t
81
82;; ssh-user: user to connect as; used by the connect parameter.
83ssh-user = tripe
84
85;; connect: shell command to use to wake up the remote peer and establish the
86;; connection.
87connect = ssh -q $(ssh-user)@$[$(host)]
88
89;; keepalive: how often to send NOP packets to keep the connection alive, at
90;; least in the minds of intermediate stateful firewalls and NAT routers.
91keepalive = 2m
92
93;; watch: whether to watch this connection and retry it if it drops.
94watch = t
95
96;;;--------------------------------------------------------------------------
97;;; Passive-peers defaults.
98;;;
99;;; The parameters here affect passive peers, i.e., those to whom dynamic
100;;; connections are made. The dynamic connection protocol establishes most
101;;; of the parameters and these defaults are probably pretty good.
102
103[@PASSIVE]
104@inherit = @GLOBAL
105
106;; peer: mark this entry as being a passive peer.
107peer = PASSIVE
108
109;; user: the string which the dynamic peer's connect command will present to
110;; the CONNECT service.
111user = $(name)
112
113;; watch: whether to watch this connection and drop it if it dies.
114watch = t
115
116;;;----- That's all, folks --------------------------------------------------