Andy Bavier | 03905bc | 2018-01-17 15:49:00 -0700 | [diff] [blame^] | 1 | {# |
| 2 | Copyright 2017-present Open Networking Foundation |
| 3 | |
| 4 | Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | you may not use this file except in compliance with the License. |
| 6 | You may obtain a copy of the License at |
| 7 | |
| 8 | http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | |
| 10 | Unless required by applicable law or agreed to in writing, software |
| 11 | distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | See the License for the specific language governing permissions and |
| 14 | limitations under the License. |
| 15 | #} |
| 16 | # -------- Local --------- |
| 17 | # The first parameter in this section is Identity, which will be used to |
| 18 | # identify this peer in the Diameter network. The Diameter protocol mandates |
| 19 | # that the Identity used is a valid FQDN for the peer. This parameter can be |
| 20 | # omitted, in that case the framework will attempt to use system default value |
| 21 | # (as returned by hostname --fqdn). |
| 22 | Identity = "{{ identity }}"; |
| 23 | |
| 24 | # In Diameter, all peers also belong to a Realm. If the realm is not specified, |
| 25 | # the framework uses the part of the Identity after the first dot. |
| 26 | Realm = "{{ realm }}"; |
| 27 | |
| 28 | |
| 29 | # This parameter is mandatory, even if it is possible to disable TLS for peers |
| 30 | # connections. A valid certificate for this Diameter Identity is expected. |
| 31 | TLS_Cred = "./conf/hss.cert.pem", "./conf/hss.key.pem"; |
| 32 | TLS_CA = "./conf/cacert.pem"; |
| 33 | |
| 34 | |
| 35 | # Disable use of TCP protocol (only listen and connect in SCTP) |
| 36 | # Default : TCP enabled |
| 37 | No_SCTP; |
| 38 | |
| 39 | |
| 40 | # This option is ignored if freeDiameter is compiled with DISABLE_SCTP option. |
| 41 | # Prefer TCP instead of SCTP for establishing new connections. |
| 42 | # This setting may be overwritten per peer in peer configuration blocs. |
| 43 | # Default : SCTP is attempted first. |
| 44 | Prefer_TCP; |
| 45 | |
| 46 | |
| 47 | # Disable use of IPv6 addresses (only IP) |
| 48 | # Default : IPv6 enabled |
| 49 | No_IPv6; |
| 50 | |
| 51 | |
| 52 | # Overwrite the number of SCTP streams. This value should be kept low, |
| 53 | # especially if you are using TLS over SCTP, because it consumes a lot of |
| 54 | # resources in that case. See tickets 19 and 27 for some additional details on |
| 55 | # this. |
| 56 | # Limit the number of SCTP streams |
| 57 | SCTP_streams = 3; |
| 58 | |
| 59 | |
| 60 | # By default, freeDiameter acts as a Diameter Relay Agent by forwarding all |
| 61 | # messages it cannot handle locally. This parameter disables this behavior. |
| 62 | NoRelay; |
| 63 | |
| 64 | |
| 65 | # Use RFC3588 method for TLS protection, where TLS is negociated after CER/CEA exchange is completed |
| 66 | # on the unsecure connection. The alternative is RFC6733 mechanism, where TLS protects also the |
| 67 | # CER/CEA exchange on a dedicated secure port. |
| 68 | # This parameter only affects outgoing connections. |
| 69 | # The setting can be also defined per-peer (see Peers configuration section). |
| 70 | # Default: use RFC6733 method with separate port for TLS. |
| 71 | |
| 72 | #TLS_old_method; |
| 73 | |
| 74 | |
| 75 | # Number of parallel threads that will handle incoming application messages. |
| 76 | # This parameter may be deprecated later in favor of a dynamic number of threads |
| 77 | # depending on the load. |
| 78 | AppServThreads = 4; |
| 79 | |
| 80 | # Specify the addresses on which to bind the listening server. This must be |
| 81 | # specified if the framework is unable to auto-detect these addresses, or if the |
| 82 | # auto-detected values are incorrect. Note that the list of addresses is sent |
| 83 | # in CER or CEA message, so one should pay attention to this parameter if some |
| 84 | # adresses should be kept hidden. |
| 85 | #ListenOn = "127.0.0.1"; |
| 86 | |
| 87 | Port = 3868; |
| 88 | SecPort = 5868; |
| 89 | |
| 90 | LoadExtension = "acl_wl.fdx" : "./conf/acl.conf"; |
| 91 | |
| 92 | # -------- Extensions --------- |
| 93 | |
| 94 | #LoadExtension = "/usr/local/lib/freeDiameter/_sample.fdx"; |
| 95 | #LoadExtension = "/usr/local/lib/freeDiameter/app_acct.fdx"; |
| 96 | #LoadExtension = "/usr/local/lib/freeDiameter/app_diameap.fdx"; |
| 97 | #LoadExtension = "/usr/local/lib/freeDiameter/app_radgw.fdx"; |
| 98 | #LoadExtension = "/usr/local/lib/freeDiameter/app_redirect.fdx"; |
| 99 | #LoadExtension = "/usr/local/lib/freeDiameter/app_sip.fdx"; |
| 100 | #LoadExtension = "/usr/local/lib/freeDiameter/dbg_interactive.fdx"; |
| 101 | #LoadExtension = "/usr/local/lib/freeDiameter/dbg_monitor.fdx"; |
| 102 | #LoadExtension = "/usr/local/lib/freeDiameter/dbg_msg_dumps.fdx"; |
| 103 | #LoadExtension = "/usr/local/lib/freeDiameter/dbg_msg_timings.fdx"; |
| 104 | #LoadExtension = "/usr/local/lib/freeDiameter/dbg_rt.fdx"; |
| 105 | LoadExtension = "/usr/local/lib/freeDiameter/dict_3gpp2_avps.fdx"; |
| 106 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_CreditControl.fdx"; |
| 107 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_CxDx.fdx"; |
| 108 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_Gx.fdx"; |
| 109 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_NAS.fdx"; |
| 110 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_Ro.fdx"; |
| 111 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_Rx.fdx"; |
| 112 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_S6mS6n.fdx"; |
| 113 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_SGd.fdx"; |
| 114 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_SLh.fdx"; |
| 115 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_Sd.fdx"; |
| 116 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_Sh.fdx"; |
| 117 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_T4.fdx"; |
| 118 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_T6aT6bT7.fdx"; |
| 119 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_Tsp.fdx"; |
| 120 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_dcca.fdx"; |
| 121 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_dcca_3gpp.fdx"; |
| 122 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_dcca_starent.fdx"; |
| 123 | LoadExtension = "/usr/local/lib/freeDiameter/dict_draftload_avps.fdx"; |
| 124 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_eap.fdx"; |
| 125 | LoadExtension = "/usr/local/lib/freeDiameter/dict_etsi283034_avps.fdx"; |
| 126 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_legacy_xml.fdx"; |
| 127 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_mip6a.fdx"; |
| 128 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_mip6i.fdx"; |
| 129 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_nas_mipv6.fdx"; |
| 130 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_nasreq.fdx"; |
| 131 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4004_avps.fdx"; |
| 132 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4006bis_avps.fdx"; |
| 133 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4072_avps.fdx"; |
| 134 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4590_avps.fdx"; |
| 135 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5447_avps.fdx"; |
| 136 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5580_avps.fdx"; |
| 137 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5777_avps.fdx"; |
| 138 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5778_avps.fdx"; |
| 139 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc6734_avps.fdx"; |
| 140 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc6942_avps.fdx"; |
| 141 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7155_avps.fdx"; |
| 142 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7683_avps.fdx"; |
| 143 | LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7944_avps.fdx"; |
| 144 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_sip.fdx"; |
| 145 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29061_avps.fdx"; |
| 146 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29128_avps.fdx"; |
| 147 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29154_avps.fdx"; |
| 148 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29173_avps.fdx"; |
| 149 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29212_avps.fdx"; |
| 150 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29214_avps.fdx"; |
| 151 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29215_avps.fdx"; |
| 152 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29217_avps.fdx"; |
| 153 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29229_avps.fdx"; |
| 154 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29272_avps.fdx"; |
| 155 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29273_avps.fdx"; |
| 156 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29329_avps.fdx"; |
| 157 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29336_avps.fdx"; |
| 158 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29337_avps.fdx"; |
| 159 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29338_avps.fdx"; |
| 160 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29343_avps.fdx"; |
| 161 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29344_avps.fdx"; |
| 162 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29345_avps.fdx"; |
| 163 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29368_avps.fdx"; |
| 164 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29468_avps.fdx"; |
| 165 | LoadExtension = "/usr/local/lib/freeDiameter/dict_ts32299_avps.fdx"; |
| 166 | #LoadExtension = "/usr/local/lib/freeDiameter/rt_busypeers.fdx"; |
| 167 | #LoadExtension = "/usr/local/lib/freeDiameter/rt_default.fdx"; |
| 168 | #LoadExtension = "/usr/local/lib/freeDiameter/rt_ereg.fdx"; |
| 169 | #LoadExtension = "/usr/local/lib/freeDiameter/rt_ignore_dh.fdx"; |
| 170 | #LoadExtension = "/usr/local/lib/freeDiameter/rt_load_balance.fdx"; |
| 171 | #LoadExtension = "/usr/local/lib/freeDiameter/rt_randomize.fdx"; |
| 172 | #LoadExtension = "/usr/local/lib/freeDiameter/rt_redirect.fdx"; |
| 173 | #LoadExtension = "/usr/local/lib/freeDiameter/test_acct.fdx"; |
| 174 | #LoadExtension = "/usr/local/lib/freeDiameter/test_app.fdx"; |
| 175 | #LoadExtension = "/usr/local/lib/freeDiameter/test_hss.fdx"; |
| 176 | #LoadExtension = "/usr/local/lib/freeDiameter/test_netemul.fdx"; |
| 177 | #LoadExtension = "/usr/local/lib/freeDiameter/test_rt_any.fdx"; |
| 178 | #LoadExtension = "/usr/local/lib/freeDiameter/test_sip.fdx"; |
| 179 | #LoadExtension = "/usr/local/lib/freeDiameter/dict_Rf.fdx"; |
| 180 | LoadExtension = "/usr/local/lib/freeDiameter/dict_S6as6d.fdx"; |
| 181 | LoadExtension = "/usr/local/lib/freeDiameter/dict_S6t.fdx"; |
| 182 | LoadExtension = "/usr/local/lib/freeDiameter/dict_S6c.fdx"; |
| 183 | |
| 184 | |
| 185 | # Load RFC4072 dictionary objects |
| 186 | #LoadExtension = "dict_eap.fdx"; |
| 187 | |
| 188 | # Load the Diameter EAP server extension (requires diameap.conf) |
| 189 | #LoadExtension = "app_diameap.fdx" : "diameap.conf"; |
| 190 | |
| 191 | # Load the Accounting Server extension (requires app_acct.conf) |
| 192 | #LoadExtension = "app_acct.fdx" : "app_acct.conf"; |
| 193 | |
| 194 | # -------- Peers --------- |
| 195 | |
| 196 | # The framework will actively attempt to establish and maintain a connection |
| 197 | # with the peers listed here. |
| 198 | # For only accepting incoming connections, see the acl_wl.fx extension. |
| 199 | |
| 200 | #ConnectPeer = "peer1.localdomain" { ConnectTo = "127.0.0.1"; }; |