blob: 7ac472b74531cc7bac8a3b8dc7c6668e87971afa [file] [log] [blame]
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -06001; The general section contains settings of nfd process.
Steve DiBenedetto24b9a642014-04-07 15:45:39 -06002general
3{
4 ; Specify a user and/or group for NFD to drop privileges to
5 ; when not performing privileged tasks. NFD does not drop
6 ; privileges by default.
7
8 ; user ndn-user
9 ; group ndn-user
10}
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -060011
Steve DiBenedettobf6a93d2014-03-21 14:03:02 -060012log
13{
14 ; default_level specifies the logging level for modules
15 ; that are not explicitly named. All debugging levels
16 ; listed above the selected value are enabled.
17 ;
18 ; Valid values:
19 ;
20 ; NONE ; no messages
21 ; ERROR ; error messages
22 ; WARN ; warning messages
23 ; INFO ; informational messages (default)
24 ; DEBUG ; debugging messages
25 ; TRACE ; trace messages (most verbose)
26 ; ALL ; all messages
27
Alexander Afanasyev885a85b2014-04-12 21:01:13 -070028 default_level INFO
Steve DiBenedettobf6a93d2014-03-21 14:03:02 -060029
30 ; You may override default_level by assigning a logging level
31 ; to the desired module name. Module names can be found in two ways:
32 ;
33 ; Run:
34 ; nfd --modules
35 ;
36 ; Or look for NFD_LOG_INIT(<module name>) statements in .cpp files
37 ;
38 ; Example module-level settings:
39 ;
40 ; FibManager DEBUG
41 ; Forwarder INFO
42}
43
Steve DiBenedetto3a4f83d2014-06-02 14:58:54 -060044; The tables section configures the CS, PIT, FIB, Strategy Choice, and Measurements
45tables
46{
Steve DiBenedetto3a4f83d2014-06-02 14:58:54 -060047 ; ContentStore size limit in number of packets
48 ; default is 65536, about 500MB with 8KB packet size
49 cs_max_packets 65536
Steve DiBenedettoc0640f52014-11-03 15:55:43 -070050
Junxiao Shib4a5acd2016-12-07 19:59:18 +000051 ; Set the CS replacement policy.
52 ; Available policies are: priority_fifo, lru
53 cs_policy priority_fifo
54
Junxiao Shi9685cc52016-08-29 12:47:05 +000055 ; Set a policy to decide whether to cache or drop unsolicited Data.
56 ; Available policies are: drop-all, admit-local, admit-network, admit-all
Junxiao Shi88f5f732016-09-03 07:11:37 +000057 cs_unsolicited_policy drop-all
Junxiao Shi9685cc52016-08-29 12:47:05 +000058
Steve DiBenedettoc0640f52014-11-03 15:55:43 -070059 ; Set the forwarding strategy for the specified prefixes:
60 ; <prefix> <strategy>
61 strategy_choice
62 {
63 / /localhost/nfd/strategy/best-route
Junxiao Shi67ba8d22015-08-21 21:21:28 -070064 /localhost /localhost/nfd/strategy/multicast
Steve DiBenedettoc0640f52014-11-03 15:55:43 -070065 /localhost/nfd /localhost/nfd/strategy/best-route
Junxiao Shi67ba8d22015-08-21 21:21:28 -070066 /ndn/broadcast /localhost/nfd/strategy/multicast
Steve DiBenedettoc0640f52014-11-03 15:55:43 -070067 }
Vince Lehman63ab1bb2015-09-04 17:06:58 -050068
69 ; Declare network region names
70 ; These are used for mobility support. An Interest carrying a Link object is
71 ; assumed to have reached the producer region if any delegation name in the
72 ; Link object is a prefix of any region name.
73 network_region
74 {
75 ; /example/region1
76 ; /example/region2
77 }
Steve DiBenedetto3a4f83d2014-06-02 14:58:54 -060078}
79
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -060080; The face_system section defines what faces and channels are created.
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -060081face_system
82{
Eric Newberry0c841642018-01-17 15:01:00 -070083 ; This section contains options that apply to multiple face protocols.
84 general
85 {
Eric Newberry17d18492018-02-10 22:50:06 -070086 enable_congestion_marking yes ; set to 'no' to disable congestion marking on supported faces, default 'yes'
Eric Newberry0c841642018-01-17 15:01:00 -070087 }
88
Davide Pesavento494a9552018-02-04 22:16:05 -050089 ; The unix section contains settings for Unix stream faces and channels.
Davide Pesavento46afec42017-05-28 14:28:47 -040090 ; A Unix channel is always listening; delete the unix section to disable
Steve DiBenedettodbcb1a12014-11-17 11:04:21 -070091 ; Unix stream faces and channels.
Steve DiBenedetto158f73f2014-12-22 14:46:12 -070092 ;
Davide Pesavento46afec42017-05-28 14:28:47 -040093 ; The ndn-cxx library expects unix:///var/run/nfd.sock to be used as
94 ; the default transport option. Please change the "transport" field
95 ; in client.conf to an appropriate tcp4 FaceUri if you want to
96 ; disable Unix sockets and use TCP instead.
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -060097 unix
98 {
Steve DiBenedettodbcb1a12014-11-17 11:04:21 -070099 path /var/run/nfd.sock ; Unix stream listener path
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600100 }
101
Davide Pesavento494a9552018-02-04 22:16:05 -0500102 ; The tcp section contains settings for TCP faces and channels.
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600103 tcp
104 {
105 listen yes ; set to 'no' to disable TCP listener, default 'yes'
106 port 6363 ; TCP listener port number
Steve DiBenedetto95152872014-04-11 12:40:59 -0600107 enable_v4 yes ; set to 'no' to disable IPv4 channels, default 'yes'
108 enable_v6 yes ; set to 'no' to disable IPv6 channels, default 'yes'
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600109 }
110
Davide Pesavento494a9552018-02-04 22:16:05 -0500111 ; The udp section contains settings for UDP faces and channels.
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600112 udp
113 {
Davide Pesavento46afec42017-05-28 14:28:47 -0400114 ; UDP unicast settings.
Davide Pesavento494a9552018-02-04 22:16:05 -0500115 listen yes ; set to 'no' to disable UDP listener, default 'yes'
116 port 6363 ; UDP listener port number
Steve DiBenedetto95152872014-04-11 12:40:59 -0600117 enable_v4 yes ; set to 'no' to disable IPv4 channels, default 'yes'
118 enable_v6 yes ; set to 'no' to disable IPv6 channels, default 'yes'
Chengyu Fanaddecff2015-02-10 14:09:01 -0700119
Davide Pesavento46afec42017-05-28 14:28:47 -0400120 ; Time (in seconds) before closing an idle UDP unicast face.
121 ; The actual timeout will occur anytime between idle_timeout and 2*idle_timeout.
122 ; The default is 600 (10 minutes).
Chengyu Fanaddecff2015-02-10 14:09:01 -0700123 idle_timeout 600
124
Davide Pesavento46afec42017-05-28 14:28:47 -0400125 ; UDP multicast settings.
126 ; By default, NFD creates one UDP multicast face per NIC.
Giulio Grassi6d7176d2014-04-16 16:08:48 +0200127 ;
128 ; In multi-homed Linux machines these settings will NOT work without
Davide Pesavento46afec42017-05-28 14:28:47 -0400129 ; root or setting the appropriate permissions:
Giulio Grassi6d7176d2014-04-16 16:08:48 +0200130 ;
Davide Pesavento46afec42017-05-28 14:28:47 -0400131 ; sudo setcap cap_net_raw=eip /path/to/nfd
Giulio Grassi6d7176d2014-04-16 16:08:48 +0200132 ;
Alexander Afanasyev885a85b2014-04-12 21:01:13 -0700133 mcast yes ; set to 'no' to disable UDP multicast, default 'yes'
Md Ashiqur Rahman8ce09032018-01-14 22:43:13 -0500134 mcast_group 224.0.23.170 ; UDP multicast group (IPv4)
135 mcast_port 56363 ; UDP multicast port number (IPv4)
136 mcast_group_v6 ff02::1234 ; UDP multicast group (IPv6)
137 mcast_port_v6 56363 ; UDP multicast port number (IPv6)
Davide Pesavento46afec42017-05-28 14:28:47 -0400138 mcast_ad_hoc no ; set to 'yes' to make all UDP multicast faces "ad hoc", default 'no'
Junxiao Shic31080d2017-01-24 15:10:12 +0000139
140 ; Whitelist and blacklist can contain, in no particular order:
Davide Pesavento46afec42017-05-28 14:28:47 -0400141 ; - interface names, including wildcard patterns (e.g., 'ifname eth0', 'ifname en*', 'ifname wlp?s0')
142 ; - mac addresses (e.g., 'ether 85:3b:4d:d3:5f:c2')
143 ; - subnets (e.g., 'subnet 192.0.2.0/24', note that only IPv4 is supported here)
144 ; - a single asterisk ('*') that matches all interfaces
145 ; By default, all interfaces are whitelisted.
Junxiao Shic31080d2017-01-24 15:10:12 +0000146 whitelist
147 {
148 *
149 }
150 blacklist
151 {
152 }
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600153 }
154
Davide Pesavento494a9552018-02-04 22:16:05 -0500155 ; The ether section contains settings for Ethernet faces and channels.
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -0600156 ; These settings will NOT work without root or setting the appropriate
157 ; permissions:
158 ;
Davide Pesavento46afec42017-05-28 14:28:47 -0400159 ; sudo setcap cap_net_raw,cap_net_admin=eip /path/to/nfd
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -0600160 ;
161 ; You may need to install a package to use setcap:
162 ;
163 ; **Ubuntu:**
164 ;
165 ; sudo apt-get install libcap2-bin
166 ;
167 ; **Mac OS X:**
168 ;
169 ; curl https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3373 -o ChmodBPF.tar.gz
170 ; tar zxvf ChmodBPF.tar.gz
171 ; open ChmodBPF/Install\ ChmodBPF.app
172 ;
173 ; or manually:
174 ;
175 ; sudo chgrp admin /dev/bpf*
176 ; sudo chmod g+rw /dev/bpf*
susmit91e1d7c2016-10-03 16:16:57 -0600177 ;
Alexander Afanasyev885a85b2014-04-12 21:01:13 -0700178 @IF_HAVE_LIBPCAP@ether
179 @IF_HAVE_LIBPCAP@{
Davide Pesavento46afec42017-05-28 14:28:47 -0400180 @IF_HAVE_LIBPCAP@ ; Ethernet unicast settings.
181 @IF_HAVE_LIBPCAP@ listen yes ; set to 'no' to disable Ethernet listener, default 'yes'
Alexander Afanasyev885a85b2014-04-12 21:01:13 -0700182 @IF_HAVE_LIBPCAP@
Davide Pesavento46afec42017-05-28 14:28:47 -0400183 @IF_HAVE_LIBPCAP@ ; Time (in seconds) before closing an idle Ethernet unicast face.
184 @IF_HAVE_LIBPCAP@ ; The actual timeout will occur anytime between idle_timeout and 2*idle_timeout.
185 @IF_HAVE_LIBPCAP@ ; The default is 600 (10 minutes).
186 @IF_HAVE_LIBPCAP@ idle_timeout 600
187 @IF_HAVE_LIBPCAP@
188 @IF_HAVE_LIBPCAP@ ; Ethernet multicast settings.
189 @IF_HAVE_LIBPCAP@ ; By default, NFD creates one Ethernet multicast face per NIC.
Alexander Afanasyev885a85b2014-04-12 21:01:13 -0700190 @IF_HAVE_LIBPCAP@ mcast yes ; set to 'no' to disable Ethernet multicast, default 'yes'
191 @IF_HAVE_LIBPCAP@ mcast_group 01:00:5E:00:17:AA ; Ethernet multicast group
Davide Pesavento46afec42017-05-28 14:28:47 -0400192 @IF_HAVE_LIBPCAP@ mcast_ad_hoc no ; set to 'yes' to make all Ethernet multicast faces "ad hoc", default 'no'
susmit91e1d7c2016-10-03 16:16:57 -0600193 @IF_HAVE_LIBPCAP@
Junxiao Shic31080d2017-01-24 15:10:12 +0000194 @IF_HAVE_LIBPCAP@ ; Whitelist and blacklist can contain, in no particular order:
Davide Pesavento46afec42017-05-28 14:28:47 -0400195 @IF_HAVE_LIBPCAP@ ; - interface names, including wildcard patterns (e.g., 'ifname eth0', 'ifname en*', 'ifname wlp?s0')
196 @IF_HAVE_LIBPCAP@ ; - mac addresses (e.g., 'ether 85:3b:4d:d3:5f:c2')
197 @IF_HAVE_LIBPCAP@ ; - subnets (e.g., 'subnet 192.0.2.0/24', note that only IPv4 is supported here)
198 @IF_HAVE_LIBPCAP@ ; - a single asterisk ('*') that matches all interfaces
199 @IF_HAVE_LIBPCAP@ ; By default, all interfaces are whitelisted.
susmit91e1d7c2016-10-03 16:16:57 -0600200 @IF_HAVE_LIBPCAP@ whitelist
201 @IF_HAVE_LIBPCAP@ {
202 @IF_HAVE_LIBPCAP@ *
203 @IF_HAVE_LIBPCAP@ }
204 @IF_HAVE_LIBPCAP@ blacklist
205 @IF_HAVE_LIBPCAP@ {
206 @IF_HAVE_LIBPCAP@ }
Alexander Afanasyev885a85b2014-04-12 21:01:13 -0700207 @IF_HAVE_LIBPCAP@}
Wentao Shang53df1632014-04-21 12:01:32 -0700208
Davide Pesavento494a9552018-02-04 22:16:05 -0500209 ; The websocket section contains settings for WebSocket faces and channels.
Wentao Shang53df1632014-04-21 12:01:32 -0700210 @IF_HAVE_WEBSOCKET@websocket
211 @IF_HAVE_WEBSOCKET@{
212 @IF_HAVE_WEBSOCKET@ listen yes ; set to 'no' to disable WebSocket listener, default 'yes'
213 @IF_HAVE_WEBSOCKET@ port 9696 ; WebSocket listener port number
214 @IF_HAVE_WEBSOCKET@ enable_v4 yes ; set to 'no' to disable listening on IPv4 socket, default 'yes'
215 @IF_HAVE_WEBSOCKET@ enable_v6 yes ; set to 'no' to disable listening on IPv6 socket, default 'yes'
216 @IF_HAVE_WEBSOCKET@}
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600217}
218
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -0600219; The authorizations section grants privileges to authorized keys.
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600220authorizations
221{
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -0600222 ; An authorize section grants privileges to a NDN certificate.
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600223 authorize
224 {
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -0600225 ; If you do not already have NDN certificate, you can generate
226 ; one with the following commands.
227 ;
228 ; 1. Generate and install a self-signed identity certificate:
229 ;
230 ; ndnsec-keygen /`whoami` | ndnsec-install-cert -
231 ;
232 ; Note that the argument to ndnsec-key will be the identity name of the
233 ; new key (in this case, /your-username). Identities are hierarchical NDN
234 ; names and may have multiple components (e.g. `/ndn/ucla/edu/alice`).
235 ; You may create additional keys and identities as you see fit.
236 ;
237 ; 2. Dump the NDN certificate to a file:
238 ;
239 ; sudo mkdir -p @SYSCONFDIR@/ndn/keys/
240 ; ndnsec-cert-dump -i /`whoami` > default.ndncert
241 ; sudo mv default.ndncert @SYSCONFDIR@/ndn/keys/default.ndncert
242 ;
243 ; The "certfile" field below specifies the default key directory for
244 ; your machine. You may move your newly created key to the location it
245 ; specifies or path.
246
Yingdi Yuc8f214c2014-04-29 20:39:37 -0700247 ; certfile keys/default.ndncert ; NDN identity certificate file
248 certfile any ; "any" authorizes command interests signed under any certificate,
249 ; i.e., no actual validation.
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -0600250 privileges ; set of privileges granted to this identity
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600251 {
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600252 faces
253 fib
Junxiao Shic9b5e012018-02-07 15:04:18 +0000254 cs
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600255 strategy-choice
256 }
257 }
Steve DiBenedetto1a3c6732014-03-13 06:44:05 -0600258
259 ; You may have multiple authorize sections that specify additional
260 ; certificates and their privileges.
261
Alexander Afanasyev885a85b2014-04-12 21:01:13 -0700262 ; authorize
263 ; {
264 ; certfile keys/this_cert_does_not_exist.ndncert
265 ; authorize
266 ; privileges
267 ; {
268 ; faces
269 ; }
270 ; }
Steve DiBenedetto84da5bf2014-03-11 14:51:29 -0600271}
Alexander Afanasyev89cf5e02014-04-17 12:08:57 -0700272
Yingdi Yue5224e92014-04-29 18:04:02 -0700273rib
Alexander Afanasyev89cf5e02014-04-17 12:08:57 -0700274{
Yingdi Yue5224e92014-04-29 18:04:02 -0700275 ; The following localhost_security allows anyone to register routing entries in local RIB
276 localhost_security
277 {
278 trust-anchor
279 {
280 type any
281 }
282 }
Alexander Afanasyev89cf5e02014-04-17 12:08:57 -0700283
Yingdi Yue5224e92014-04-29 18:04:02 -0700284 ; localhop_security should be enabled when NFD runs on a hub.
285 ; "/localhop/nfd/fib" command prefix will be disabled when localhop_security section is missing.
286 ; localhop_security
Alexander Afanasyev89cf5e02014-04-17 12:08:57 -0700287 ; {
Yingdi Yue5224e92014-04-29 18:04:02 -0700288 ; ; This section defines the trust model for NFD RIB Management. It consists of rules and
289 ; ; trust-anchors, which are briefly defined in this file. For more information refer to
Chavoosh Ghasemi60b7d512017-08-10 17:17:46 -0700290 ; ; validator configuration file format documentation:
Yingdi Yue5224e92014-04-29 18:04:02 -0700291 ; ;
Chavoosh Ghasemi60b7d512017-08-10 17:17:46 -0700292 ; ; https://named-data.net/doc/ndn-cxx/current/tutorials/security-validator-config.html
Yingdi Yue5224e92014-04-29 18:04:02 -0700293 ; ;
294 ; ; A trust-anchor is a pre-trusted certificate. This can be any certificate that is the
295 ; ; root of certification chain (e.g., NDN testbed root certificate) or an existing
296 ; ; default system certificate `default.ndncert`.
297 ; ;
298 ; ; A rule defines conditions a valid packet MUST have. A packet must satisfy one of the
299 ; ; rules defined here. A rule can be broken into two parts: matching & checking. A packet
300 ; ; will be matched against rules from the first to the last until a matched rule is
301 ; ; encountered. The matched rule will be used to check the packet. If a packet does not
302 ; ; match any rule, it will be treated as invalid. The matching part of a rule consists
303 ; ; of `for` and `filter` sections. They collectively define which packets can be checked
304 ; ; with this rule. `for` defines packet type (data or interest) and `filter` defines
305 ; ; conditions on other properties of a packet. Right now, you can only define conditions
306 ; ; on packet name, and you can only specify ONLY ONE filter for packet name. The
307 ; ; checking part of a rule consists of `checker`, which defines the conditions that a
308 ; ; VALID packet MUST have. See comments in checker section for more details.
309 ;
310 ; rule
311 ; {
Alexander Afanasyev38fb2512017-09-15 13:07:42 -0400312 ; id "RIB Registration Command Rule"
Yingdi Yue5224e92014-04-29 18:04:02 -0700313 ; for interest ; rule for Interests (to validate CommandInterests)
314 ; filter
315 ; {
Alexander Afanasyev38fb2512017-09-15 13:07:42 -0400316 ; type name ; condition on interest name (w/o SignatureInfo/SignatureValue)
317 ; regex ^[<localhop><localhost>]<nfd><rib>[<register><unregister>]<><><>$
Yingdi Yue5224e92014-04-29 18:04:02 -0700318 ; }
319 ; checker
320 ; {
321 ; type customized
322 ; sig-type rsa-sha256 ; interest must have a rsa-sha256 signature
323 ; key-locator
324 ; {
325 ; type name ; key locator must be the certificate name of the
326 ; ; signing key
Alexander Afanasyev38fb2512017-09-15 13:07:42 -0400327 ; regex ^<>*<KEY><>$
Yingdi Yue5224e92014-04-29 18:04:02 -0700328 ; }
329 ; }
330 ; }
331 ; rule
332 ; {
333 ; id "NDN Testbed Hierarchy Rule"
334 ; for data ; rule for Data (to validate NDN certificates)
335 ; filter
336 ; {
337 ; type name ; condition on data name
Alexander Afanasyev38fb2512017-09-15 13:07:42 -0400338 ; regex ^<>*<KEY><><><>$
Yingdi Yue5224e92014-04-29 18:04:02 -0700339 ; }
340 ; checker
341 ; {
342 ; type hierarchical ; the certificate name of the signing key and
343 ; ; the data name must follow the hierarchical model
344 ; sig-type rsa-sha256 ; data must have a rsa-sha256 signature
345 ; }
346 ; }
347 ; trust-anchor
348 ; {
349 ; type file
350 ; file-name keys/default.ndncert ; the file name, by default this file should be placed in the
351 ; ; same folder as this config file.
352 ; }
353 ; ; trust-anchor ; Can be repeated multiple times to specify multiple trust anchors
354 ; ; {
355 ; ; type file
356 ; ; file-name keys/ndn-testbed.ndncert
357 ; ; }
Alexander Afanasyev89cf5e02014-04-17 12:08:57 -0700358 ; }
Yanbiao Lic17de832014-11-21 17:51:45 -0800359
Yanbiao Lib9d439d2014-12-11 16:12:32 -0800360 ; The following localhop_security should be enabled when NFD runs on a hub,
361 ; which accepts all remote registrations and is a short-term solution.
362 ; localhop_security
363 ; {
364 ; trust-anchor
365 ; {
366 ; type any
367 ; }
368 ; }
369
Yanbiao Lid7c96362015-01-30 23:58:24 -0800370 auto_prefix_propagate
Yanbiao Lic17de832014-11-21 17:51:45 -0800371 {
372 cost 15 ; forwarding cost of prefix registered on remote router
Yanbiao Lid7c96362015-01-30 23:58:24 -0800373 timeout 10000 ; timeout (in milliseconds) of prefix registration command for propagation
Yanbiao Lic17de832014-11-21 17:51:45 -0800374
Yanbiao Lid7c96362015-01-30 23:58:24 -0800375 refresh_interval 300 ; interval (in seconds) before refreshing the propagation
Yanbiao Lic17de832014-11-21 17:51:45 -0800376 ; This setting should be less than face_system.udp.idle_time,
377 ; so that the face is kept alive on the remote router.
Yanbiao Lid7c96362015-01-30 23:58:24 -0800378
379 base_retry_wait 50 ; base wait time (in seconds) before retrying propagation
380 max_retry_wait 3600 ; maximum wait time (in seconds) before retrying propagation
381 ; for consequent retries, the wait time before each retry is calculated based on the back-off
382 ; policy. Initially, the wait time is set to base_retry_wait, then it will be doubled for every
383 ; retry unless beyond the max_retry_wait, in which case max_retry_wait is set as the wait time.
Yanbiao Lic17de832014-11-21 17:51:45 -0800384 }
Nick Gordon9fcf1232017-03-10 22:30:20 +0000385
386 ; If enabled, routes registered with origin=client (typically from auto_prefix_propagate)
387 ; will be readvertised into local NLSR daemon.
388 readvertise_nlsr no
Alexander Afanasyev89cf5e02014-04-17 12:08:57 -0700389}