blob: 66bb8e22865a61d0c65267580626d96b498a37d7 [file] [log] [blame]
Andy Bavier03905bc2018-01-17 15:49:00 -07001{#
2Copyright 2017-present Open Networking Foundation
3
4Licensed under the Apache License, Version 2.0 (the "License");
5you may not use this file except in compliance with the License.
6You may obtain a copy of the License at
7
8http://www.apache.org/licenses/LICENSE-2.0
9
10Unless required by applicable law or agreed to in writing, software
11distributed under the License is distributed on an "AS IS" BASIS,
12WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13See the License for the specific language governing permissions and
14limitations under the License.
15#}
16# -------- Local ---------
17# The first parameter in this section is Identity, which will be used to
18# identify this peer in the Diameter network. The Diameter protocol mandates
19# that the Identity used is a valid FQDN for the peer. This parameter can be
20# omitted, in that case the framework will attempt to use system default value
21# (as returned by hostname --fqdn).
22Identity = "{{ identity }}";
23
24# In Diameter, all peers also belong to a Realm. If the realm is not specified,
25# the framework uses the part of the Identity after the first dot.
26Realm = "{{ realm }}";
27
28
29# This parameter is mandatory, even if it is possible to disable TLS for peers
30# connections. A valid certificate for this Diameter Identity is expected.
31TLS_Cred = "./conf/hss.cert.pem", "./conf/hss.key.pem";
32TLS_CA = "./conf/cacert.pem";
33
34
35# Disable use of TCP protocol (only listen and connect in SCTP)
36# Default : TCP enabled
37No_SCTP;
38
39
40# This option is ignored if freeDiameter is compiled with DISABLE_SCTP option.
41# Prefer TCP instead of SCTP for establishing new connections.
42# This setting may be overwritten per peer in peer configuration blocs.
43# Default : SCTP is attempted first.
44Prefer_TCP;
45
46
47# Disable use of IPv6 addresses (only IP)
48# Default : IPv6 enabled
49No_IPv6;
50
51
52# Overwrite the number of SCTP streams. This value should be kept low,
53# especially if you are using TLS over SCTP, because it consumes a lot of
54# resources in that case. See tickets 19 and 27 for some additional details on
55# this.
56# Limit the number of SCTP streams
57SCTP_streams = 3;
58
59
60# By default, freeDiameter acts as a Diameter Relay Agent by forwarding all
61# messages it cannot handle locally. This parameter disables this behavior.
62NoRelay;
63
64
65# Use RFC3588 method for TLS protection, where TLS is negociated after CER/CEA exchange is completed
66# on the unsecure connection. The alternative is RFC6733 mechanism, where TLS protects also the
67# CER/CEA exchange on a dedicated secure port.
68# This parameter only affects outgoing connections.
69# The setting can be also defined per-peer (see Peers configuration section).
70# Default: use RFC6733 method with separate port for TLS.
71
72#TLS_old_method;
73
74
75# Number of parallel threads that will handle incoming application messages.
76# This parameter may be deprecated later in favor of a dynamic number of threads
77# depending on the load.
78AppServThreads = 4;
79
80# Specify the addresses on which to bind the listening server. This must be
81# specified if the framework is unable to auto-detect these addresses, or if the
82# auto-detected values are incorrect. Note that the list of addresses is sent
83# in CER or CEA message, so one should pay attention to this parameter if some
84# adresses should be kept hidden.
85#ListenOn = "127.0.0.1";
86
87Port = 3868;
88SecPort = 5868;
89
90LoadExtension = "acl_wl.fdx" : "./conf/acl.conf";
91
92# -------- Extensions ---------
93
94#LoadExtension = "/usr/local/lib/freeDiameter/_sample.fdx";
95#LoadExtension = "/usr/local/lib/freeDiameter/app_acct.fdx";
96#LoadExtension = "/usr/local/lib/freeDiameter/app_diameap.fdx";
97#LoadExtension = "/usr/local/lib/freeDiameter/app_radgw.fdx";
98#LoadExtension = "/usr/local/lib/freeDiameter/app_redirect.fdx";
99#LoadExtension = "/usr/local/lib/freeDiameter/app_sip.fdx";
100#LoadExtension = "/usr/local/lib/freeDiameter/dbg_interactive.fdx";
101#LoadExtension = "/usr/local/lib/freeDiameter/dbg_monitor.fdx";
102#LoadExtension = "/usr/local/lib/freeDiameter/dbg_msg_dumps.fdx";
103#LoadExtension = "/usr/local/lib/freeDiameter/dbg_msg_timings.fdx";
104#LoadExtension = "/usr/local/lib/freeDiameter/dbg_rt.fdx";
105LoadExtension = "/usr/local/lib/freeDiameter/dict_3gpp2_avps.fdx";
106#LoadExtension = "/usr/local/lib/freeDiameter/dict_CreditControl.fdx";
107#LoadExtension = "/usr/local/lib/freeDiameter/dict_CxDx.fdx";
108#LoadExtension = "/usr/local/lib/freeDiameter/dict_Gx.fdx";
109#LoadExtension = "/usr/local/lib/freeDiameter/dict_NAS.fdx";
110#LoadExtension = "/usr/local/lib/freeDiameter/dict_Ro.fdx";
111#LoadExtension = "/usr/local/lib/freeDiameter/dict_Rx.fdx";
112#LoadExtension = "/usr/local/lib/freeDiameter/dict_S6mS6n.fdx";
113#LoadExtension = "/usr/local/lib/freeDiameter/dict_SGd.fdx";
114#LoadExtension = "/usr/local/lib/freeDiameter/dict_SLh.fdx";
115#LoadExtension = "/usr/local/lib/freeDiameter/dict_Sd.fdx";
116#LoadExtension = "/usr/local/lib/freeDiameter/dict_Sh.fdx";
117#LoadExtension = "/usr/local/lib/freeDiameter/dict_T4.fdx";
118#LoadExtension = "/usr/local/lib/freeDiameter/dict_T6aT6bT7.fdx";
119#LoadExtension = "/usr/local/lib/freeDiameter/dict_Tsp.fdx";
120#LoadExtension = "/usr/local/lib/freeDiameter/dict_dcca.fdx";
121#LoadExtension = "/usr/local/lib/freeDiameter/dict_dcca_3gpp.fdx";
122#LoadExtension = "/usr/local/lib/freeDiameter/dict_dcca_starent.fdx";
123LoadExtension = "/usr/local/lib/freeDiameter/dict_draftload_avps.fdx";
124#LoadExtension = "/usr/local/lib/freeDiameter/dict_eap.fdx";
125LoadExtension = "/usr/local/lib/freeDiameter/dict_etsi283034_avps.fdx";
126#LoadExtension = "/usr/local/lib/freeDiameter/dict_legacy_xml.fdx";
127#LoadExtension = "/usr/local/lib/freeDiameter/dict_mip6a.fdx";
128#LoadExtension = "/usr/local/lib/freeDiameter/dict_mip6i.fdx";
129#LoadExtension = "/usr/local/lib/freeDiameter/dict_nas_mipv6.fdx";
130#LoadExtension = "/usr/local/lib/freeDiameter/dict_nasreq.fdx";
131LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4004_avps.fdx";
132LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4006bis_avps.fdx";
133LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4072_avps.fdx";
134LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4590_avps.fdx";
135LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5447_avps.fdx";
136LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5580_avps.fdx";
137LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5777_avps.fdx";
138LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5778_avps.fdx";
139LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc6734_avps.fdx";
140LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc6942_avps.fdx";
141LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7155_avps.fdx";
142LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7683_avps.fdx";
143LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7944_avps.fdx";
144#LoadExtension = "/usr/local/lib/freeDiameter/dict_sip.fdx";
145LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29061_avps.fdx";
146LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29128_avps.fdx";
147LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29154_avps.fdx";
148LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29173_avps.fdx";
149LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29212_avps.fdx";
150LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29214_avps.fdx";
151LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29215_avps.fdx";
152LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29217_avps.fdx";
153LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29229_avps.fdx";
154LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29272_avps.fdx";
155LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29273_avps.fdx";
156LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29329_avps.fdx";
157LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29336_avps.fdx";
158LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29337_avps.fdx";
159LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29338_avps.fdx";
160LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29343_avps.fdx";
161LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29344_avps.fdx";
162LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29345_avps.fdx";
163LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29368_avps.fdx";
164LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29468_avps.fdx";
165LoadExtension = "/usr/local/lib/freeDiameter/dict_ts32299_avps.fdx";
166#LoadExtension = "/usr/local/lib/freeDiameter/rt_busypeers.fdx";
167#LoadExtension = "/usr/local/lib/freeDiameter/rt_default.fdx";
168#LoadExtension = "/usr/local/lib/freeDiameter/rt_ereg.fdx";
169#LoadExtension = "/usr/local/lib/freeDiameter/rt_ignore_dh.fdx";
170#LoadExtension = "/usr/local/lib/freeDiameter/rt_load_balance.fdx";
171#LoadExtension = "/usr/local/lib/freeDiameter/rt_randomize.fdx";
172#LoadExtension = "/usr/local/lib/freeDiameter/rt_redirect.fdx";
173#LoadExtension = "/usr/local/lib/freeDiameter/test_acct.fdx";
174#LoadExtension = "/usr/local/lib/freeDiameter/test_app.fdx";
175#LoadExtension = "/usr/local/lib/freeDiameter/test_hss.fdx";
176#LoadExtension = "/usr/local/lib/freeDiameter/test_netemul.fdx";
177#LoadExtension = "/usr/local/lib/freeDiameter/test_rt_any.fdx";
178#LoadExtension = "/usr/local/lib/freeDiameter/test_sip.fdx";
179#LoadExtension = "/usr/local/lib/freeDiameter/dict_Rf.fdx";
180LoadExtension = "/usr/local/lib/freeDiameter/dict_S6as6d.fdx";
181LoadExtension = "/usr/local/lib/freeDiameter/dict_S6t.fdx";
182LoadExtension = "/usr/local/lib/freeDiameter/dict_S6c.fdx";
183
184
185# Load RFC4072 dictionary objects
186#LoadExtension = "dict_eap.fdx";
187
188# Load the Diameter EAP server extension (requires diameap.conf)
189#LoadExtension = "app_diameap.fdx" : "diameap.conf";
190
191# Load the Accounting Server extension (requires app_acct.conf)
192#LoadExtension = "app_acct.fdx" : "app_acct.conf";
193
194# -------- Peers ---------
195
196# The framework will actively attempt to establish and maintain a connection
197# with the peers listed here.
198# For only accepting incoming connections, see the acl_wl.fx extension.
199
200#ConnectPeer = "peer1.localdomain" { ConnectTo = "127.0.0.1"; };