From b53b02fceb75c741c91a468061cbc6fe92b606b6 Mon Sep 17 00:00:00 2001 From: Toby Date: Sun, 27 Oct 2024 19:12:55 -0700 Subject: [PATCH] feat: new config fields in v0.4.1 --- docs/docs/build-run.md | 8 ++++++++ docs/docs/build-run.zh.md | 8 ++++++++ 2 files changed, 16 insertions(+) diff --git a/docs/docs/build-run.md b/docs/docs/build-run.md index 4de4d48..50dd287 100644 --- a/docs/docs/build-run.md +++ b/docs/docs/build-run.md @@ -41,6 +41,10 @@ opkg install nftables kmod-nft-queue kmod-nf-conntrack-netlink ```yaml io: queueSize: 1024 + queueNum: 100 # (6)! + table: opengfw # (7)! + connMarkAccept: 1001 # (8)! + connMarkDrop: 1002 # (9)! rcvBuf: 4194304 sndBuf: 4194304 local: true # (1)! @@ -69,3 +73,7 @@ replay: 3. Recommended to be no more than the number of CPU cores 4. How long a connection is considered dead when no data is being transferred. Dead connections are purged from TCP reassembly pools once per minute. 5. Set to true if you want to replay the packets in the pcap file in "real time" (instead of as fast as possible) +6. nfqueue queue number +7. nftables table name +8. connmark value for accepted connections +9. connmark value for dropped connections diff --git a/docs/docs/build-run.zh.md b/docs/docs/build-run.zh.md index 8e3cab5..eb62c13 100644 --- a/docs/docs/build-run.zh.md +++ b/docs/docs/build-run.zh.md @@ -41,6 +41,10 @@ opkg install nftables kmod-nft-queue kmod-nf-conntrack-netlink ```yaml io: queueSize: 1024 + queueNum: 100 # (6)! + table: opengfw # (7)! + connMarkAccept: 1001 # (8)! + connMarkDrop: 1002 # (9)! rcvBuf: 4194304 sndBuf: 4194304 local: true # (1)! @@ -69,3 +73,7 @@ replay: 3. 建议不超过 CPU 核心数 4. 一个连接多久没有数据传输后会被认为是死连接。TCP 重组的连接池会以每分钟一次的频率清理死连接 5. 如果希望以实时速度（pcap 文件中的时间戳）回放 pcap 中的数据包（而不是以能处理的最快速度），设置为 true +6. nfqueue 队列序号 +7. nftables 表名 +8. 放行连接的 connmark 值 +9. 阻断连接的 connmark 值