akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 1 | ; the general section contains all the general settings for router |
akmhoque | ba09474 | 2014-02-28 11:47:21 -0600 | [diff] [blame] | 2 | |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 3 | general |
| 4 | { |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 5 | ; mandatory configuration command section network, site and router |
akmhoque | ba09474 | 2014-02-28 11:47:21 -0600 | [diff] [blame] | 6 | |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 7 | network /ndn/ ; name of the network the router belongs to in ndn URI format |
| 8 | site /edu/memphis ; name of the site the router belongs to in ndn URI format |
| 9 | router /%C1.Router/cs/pollux ; name of the router in ndn URI format |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 10 | |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 11 | ; lsa-refresh-time is the time in seconds, after which router will refresh its LSAs |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 12 | lsa-refresh-time 1800 ; default value 1800. Valid values 240-7200 |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 13 | |
Nick Gordon | d5c1a37 | 2016-10-31 13:56:23 -0500 | [diff] [blame] | 14 | ; router-dead-interval is the time in seconds after which an inactive routers |
Vince Lehman | fc7d5b6 | 2014-12-05 15:02:47 -0600 | [diff] [blame] | 15 | ; LSAs are removed |
| 16 | ;router-dead-interval 3600 ; default value: 2*lsa-refresh-time. Value must be larger |
| 17 | ; than lsa-refresh-time |
| 18 | |
Alexander Afanasyev | 411ee4b | 2014-08-16 23:17:03 -0700 | [diff] [blame] | 19 | ; InterestLifetime (in seconds) for LSA fetching |
| 20 | lsa-interest-lifetime 4 ; default value 4. Valid values 1-60 |
| 21 | |
Ashlesh Gawande | 32ec3fd | 2018-07-18 13:42:32 -0500 | [diff] [blame] | 22 | ; select sync protocol: chronosync or psync |
| 23 | sync-protocol psync |
| 24 | |
| 25 | ; sync interest lifetime of ChronoSync/PSync in milliseconds |
Ashlesh Gawande | f7da9c5 | 2018-02-06 17:36:46 -0600 | [diff] [blame] | 26 | sync-interest-lifetime 60000 ; default value 60000. Valid values 1000-120,000 |
| 27 | |
dmcoomes | cf8d0ed | 2017-02-21 11:39:01 -0600 | [diff] [blame] | 28 | seq-dir /var/lib/nlsr ; path for sequence directory (Absolute path) |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 29 | } |
| 30 | |
Nick Gordon | d5c1a37 | 2016-10-31 13:56:23 -0500 | [diff] [blame] | 31 | ; the neighbor's section contains the configuration for router's neighbors and hellos behavior |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 32 | |
| 33 | neighbors |
| 34 | { |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 35 | ; in case hello interest timed out, router will try 'hello-retries' times at 'hello-timeout' |
| 36 | ; seconds interval before giving up for any neighbors (deciding link is down) |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 37 | |
| 38 | hello-retries 3 ; interest retries number in integer. Default value 3 |
| 39 | ; valid values 1-10 |
| 40 | |
| 41 | hello-timeout 1 ; interest time out value in integer. Default value 1 |
| 42 | ; Valid values 1-15 |
| 43 | |
| 44 | hello-interval 60 ; interest sending interval in seconds. Default value 60 |
| 45 | ; valid values 30-90 |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 46 | |
Vince Lehman | 7b61658 | 2014-10-17 16:25:39 -0500 | [diff] [blame] | 47 | ; adj-lsa-build-interval is the time to wait in seconds after an Adjacency LSA build is scheduled |
| 48 | ; before actually building the Adjacency LSA |
| 49 | |
| 50 | adj-lsa-build-interval 5 ; default value 5. Valid values 0-5. It is recommended that |
| 51 | ; adj-lsa-build-interval have a lower value than routing-calc-interval |
| 52 | |
| 53 | ; first-hello-interval is the time to wait in seconds before sending the first Hello Interest |
| 54 | |
| 55 | first-hello-interval 10 ; Default value 10. Valid values 0-10 |
| 56 | |
Nick Gordon | d5c1a37 | 2016-10-31 13:56:23 -0500 | [diff] [blame] | 57 | face-dataset-fetch-tries 3 ; default is 3. Valid values 1-10. The FaceDataset is |
| 58 | ; gotten from NFD, and is needed to configure NLSR |
| 59 | ; correctly. It is recommended not to set this |
Muktadir Chowdhury | f04f989 | 2017-08-20 20:42:56 -0500 | [diff] [blame] | 60 | ; variable too high, because it could cause |
Nick Gordon | d5c1a37 | 2016-10-31 13:56:23 -0500 | [diff] [blame] | 61 | ; congestion for NFD. |
| 62 | |
| 63 | face-dataset-fetch-interval 3600 ; default is 3600. Valid values 1800-5400. |
| 64 | ; This controls how often (in seconds) NLSR will attempt to |
| 65 | ; fetch a FaceStatus dataset from NFD. |
| 66 | |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 67 | ; neighbor command is used to configure router's neighbor. Each neighbor will need |
| 68 | ; one block of neighbor command |
| 69 | |
| 70 | neighbor |
| 71 | { |
| 72 | name /ndn/edu/memphis/%C1.Router/cs/castor ; name prefix of the neighbor router consists |
| 73 | ; of network, site-name and router-name |
| 74 | |
| 75 | face-uri udp://castor.cs.memphis.edu ; face uri of the face connected to the neighbor |
| 76 | link-cost 25 ; cost of the connecting link to neighbor |
| 77 | } |
| 78 | |
| 79 | neighbor |
| 80 | { |
| 81 | name /ndn/edu/memphis/%C1.Router/cs/mira ; name prefix of the neighbor router consists |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 82 | ; of network, site-name and router-name |
| 83 | |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 84 | face-uri udp://mira.cs.memphis.edu ; face uri of the face connected to the neighbor |
| 85 | link-cost 30 ; cost of the connecting link to neighbor |
| 86 | } |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 87 | } |
| 88 | |
| 89 | ; the hyperbolic section contains the configuration settings of enabling a router to calculate |
| 90 | ; routing table using [hyperbolic routing table calculation](http://arxiv.org/abs/0805.1266) method |
| 91 | |
| 92 | hyperbolic |
| 93 | { |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 94 | ; commands in this section follows a strict order |
| 95 | ; the switch is used to set hyperbolic routing calculation in NLSR |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 96 | |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 97 | state off ; default value 'off', set value 'on' to enable hyperbolic routing table |
Junxiao Shi | f09e263 | 2015-01-02 18:15:01 -0700 | [diff] [blame] | 98 | ; calculation which turns link state routing 'off'. set value to 'dry-run' |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 99 | ; to test hyperbolic routing and compare with link state routing. |
akmhoque | ba09474 | 2014-02-28 11:47:21 -0600 | [diff] [blame] | 100 | |
| 101 | |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 102 | radius 123.456 ; radius of the router in hyperbolic coordinate system |
Muktadir R Chowdhury | b00dc2a | 2016-11-05 10:48:58 -0600 | [diff] [blame] | 103 | angle 1.45,2.36 ; angle of the router in hyperbolic coordinate system |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 104 | } |
| 105 | |
| 106 | |
Nick Gordon | d5c1a37 | 2016-10-31 13:56:23 -0500 | [diff] [blame] | 107 | ; the fib section is used to configure fib entrys type to ndn FIB updated by NLSR |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 108 | |
| 109 | fib |
| 110 | { |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 111 | ; the max-faces-per-prefix is used to limit the number of faces for each name prefixes |
| 112 | ; by NLSR in ndn FIB |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 113 | |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 114 | max-faces-per-prefix 3 ; default value 0. Valid value 0-60. By default (value 0) NLSR adds |
| 115 | ; all available faces for each reachable name prefixes in NDN FIB |
Vince Lehman | 7b61658 | 2014-10-17 16:25:39 -0500 | [diff] [blame] | 116 | |
| 117 | ; routing-calc-interval is the time to wait in seconds after a routing table calculation is |
| 118 | ; scheduled before actually performing the routing table calculation |
| 119 | |
| 120 | routing-calc-interval 15 ; default value 15. Valid values 0-15. It is recommended that |
| 121 | ; routing-calc-interval have a higher value than adj-lsa-build-interval |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 122 | } |
| 123 | |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 124 | ; the advertising section contains the configuration settings of the name prefixes |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 125 | ; hosted by this router |
| 126 | |
| 127 | advertising |
| 128 | { |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 129 | ; the ndnname is used to advertised name from the router. To advertise each name prefix |
| 130 | ; configure one block of ndnname configuration command for every name prefix. |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 131 | |
Alexander Afanasyev | 8388ec6 | 2014-08-16 18:38:57 -0700 | [diff] [blame] | 132 | prefix /ndn/edu/memphis/cs/netlab ; name in ndn URI format |
| 133 | prefix /ndn/edu/memphis/sports/basketball |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 134 | } |
| 135 | |
| 136 | security |
| 137 | { |
| 138 | validator |
| 139 | { |
| 140 | rule |
| 141 | { |
Laqin Fan | d8c9d8c | 2017-01-18 21:45:14 +0000 | [diff] [blame] | 142 | id "NLSR Hello Rule" |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 143 | for data |
| 144 | filter |
| 145 | { |
| 146 | type name |
Ashlesh Gawande | cba0ae2 | 2018-03-27 17:57:56 -0500 | [diff] [blame] | 147 | regex ^[^<nlsr><INFO>]*<nlsr><INFO><><>$ |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 148 | } |
| 149 | checker |
| 150 | { |
| 151 | type customized |
| 152 | sig-type rsa-sha256 |
| 153 | key-locator |
| 154 | { |
| 155 | type name |
| 156 | hyper-relation |
| 157 | { |
Ashlesh Gawande | cba0ae2 | 2018-03-27 17:57:56 -0500 | [diff] [blame] | 158 | k-regex ^([^<KEY><nlsr>]*)<nlsr><KEY><>$ |
Yingdi Yu | 6a3a4dd | 2014-06-20 14:10:39 -0700 | [diff] [blame] | 159 | k-expand \\1 |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 160 | h-relation equal |
Ashlesh Gawande | cba0ae2 | 2018-03-27 17:57:56 -0500 | [diff] [blame] | 161 | p-regex ^([^<nlsr><INFO>]*)<nlsr><INFO><><>$ |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 162 | p-expand \\1 |
| 163 | } |
| 164 | } |
| 165 | } |
| 166 | } |
| 167 | |
| 168 | rule |
| 169 | { |
Laqin Fan | d8c9d8c | 2017-01-18 21:45:14 +0000 | [diff] [blame] | 170 | id "NLSR LSA Rule" |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 171 | for data |
| 172 | filter |
| 173 | { |
| 174 | type name |
Ashlesh Gawande | cba0ae2 | 2018-03-27 17:57:56 -0500 | [diff] [blame] | 175 | regex ^[^<nlsr><LSA>]*<nlsr><LSA> |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 176 | } |
| 177 | checker |
| 178 | { |
| 179 | type customized |
| 180 | sig-type rsa-sha256 |
| 181 | key-locator |
| 182 | { |
| 183 | type name |
| 184 | hyper-relation |
| 185 | { |
Ashlesh Gawande | cba0ae2 | 2018-03-27 17:57:56 -0500 | [diff] [blame] | 186 | k-regex ^([^<KEY><nlsr>]*)<nlsr><KEY><>$ |
Yingdi Yu | 6a3a4dd | 2014-06-20 14:10:39 -0700 | [diff] [blame] | 187 | k-expand \\1 |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 188 | h-relation equal |
Muktadir R Chowdhury | aa3b085 | 2015-08-06 13:08:56 -0500 | [diff] [blame] | 189 | ; the last four components in the prefix should be <lsaType><seqNo><version><segmentNo> |
Ashlesh Gawande | cba0ae2 | 2018-03-27 17:57:56 -0500 | [diff] [blame] | 190 | p-regex ^<localhop>([^<nlsr><LSA>]*)<nlsr><LSA>(<>*)<><><><>$ |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 191 | p-expand \\1\\2 |
| 192 | } |
| 193 | } |
| 194 | } |
| 195 | } |
| 196 | |
| 197 | rule |
| 198 | { |
Laqin Fan | d8c9d8c | 2017-01-18 21:45:14 +0000 | [diff] [blame] | 199 | id "NLSR Hierarchy Exception Rule" |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 200 | for data |
| 201 | filter |
| 202 | { |
| 203 | type name |
Ashlesh Gawande | cba0ae2 | 2018-03-27 17:57:56 -0500 | [diff] [blame] | 204 | regex ^[^<KEY><%C1.Router>]*<%C1.Router>[^<KEY><nlsr>]*<KEY><><><>$ |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 205 | } |
| 206 | checker |
| 207 | { |
| 208 | type customized |
| 209 | sig-type rsa-sha256 |
| 210 | key-locator |
| 211 | { |
| 212 | type name |
| 213 | hyper-relation |
| 214 | { |
Muktadir Chowdhury | f04f989 | 2017-08-20 20:42:56 -0500 | [diff] [blame] | 215 | k-regex ^([^<KEY><%C1.Operator>]*)<%C1.Operator>[^<KEY>]*<KEY><>$ |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 216 | k-expand \\1 |
| 217 | h-relation equal |
Muktadir Chowdhury | f04f989 | 2017-08-20 20:42:56 -0500 | [diff] [blame] | 218 | p-regex ^([^<KEY><%C1.Router>]*)<%C1.Router>[^<KEY>]*<KEY><><><>$ |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 219 | p-expand \\1 |
| 220 | } |
| 221 | } |
| 222 | } |
| 223 | } |
| 224 | |
| 225 | rule |
| 226 | { |
Laqin Fan | d8c9d8c | 2017-01-18 21:45:14 +0000 | [diff] [blame] | 227 | id "NLSR Hierarchical Rule" |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 228 | for data |
| 229 | filter |
| 230 | { |
| 231 | type name |
Muktadir Chowdhury | f04f989 | 2017-08-20 20:42:56 -0500 | [diff] [blame] | 232 | regex ^[^<KEY>]*<KEY><><><>$ |
Yingdi Yu | 20e3a6e | 2014-05-26 23:16:10 -0700 | [diff] [blame] | 233 | } |
| 234 | checker |
| 235 | { |
| 236 | type hierarchical |
| 237 | sig-type rsa-sha256 |
| 238 | } |
| 239 | } |
| 240 | |
| 241 | trust-anchor |
| 242 | { |
| 243 | type file |
| 244 | file-name "root.cert" |
| 245 | } |
| 246 | } |
alvy | 297f416 | 2015-03-03 17:15:33 -0600 | [diff] [blame] | 247 | |
| 248 | prefix-update-validator |
| 249 | { |
| 250 | rule |
| 251 | { |
| 252 | id "NLSR ControlCommand Rule" |
| 253 | for interest |
| 254 | filter |
| 255 | { |
| 256 | type name |
Muktadir Chowdhury | f04f989 | 2017-08-20 20:42:56 -0500 | [diff] [blame] | 257 | ; /<prefix>/<management-module>/<command-verb>/<control-parameters> |
| 258 | ; /<timestamp>/<random-value>/<signed-interests-components> |
| 259 | regex ^<localhost><nlsr><prefix-update>[<advertise><withdraw>]<><><>$ |
alvy | 297f416 | 2015-03-03 17:15:33 -0600 | [diff] [blame] | 260 | } |
| 261 | checker |
| 262 | { |
| 263 | type customized |
| 264 | sig-type rsa-sha256 |
| 265 | key-locator |
| 266 | { |
| 267 | type name |
Muktadir Chowdhury | f04f989 | 2017-08-20 20:42:56 -0500 | [diff] [blame] | 268 | regex ^([^<KEY><%C1.Operator>]*)<%C1.Operator>[^<KEY>]*<KEY><>$ |
alvy | 297f416 | 2015-03-03 17:15:33 -0600 | [diff] [blame] | 269 | } |
| 270 | } |
| 271 | } |
| 272 | |
| 273 | rule |
| 274 | { |
| 275 | id "NLSR Hierarchy Rule" |
| 276 | for data |
| 277 | filter |
| 278 | { |
| 279 | type name |
Muktadir Chowdhury | f04f989 | 2017-08-20 20:42:56 -0500 | [diff] [blame] | 280 | regex ^[^<KEY>]*<KEY><><><>$ |
alvy | 297f416 | 2015-03-03 17:15:33 -0600 | [diff] [blame] | 281 | } |
| 282 | checker |
| 283 | { |
| 284 | type hierarchical |
| 285 | sig-type rsa-sha256 |
| 286 | } |
| 287 | } |
| 288 | |
| 289 | trust-anchor |
| 290 | { |
| 291 | type file |
| 292 | file-name "site.cert" |
| 293 | } |
| 294 | } |
Muktadir Chowdhury | f04f989 | 2017-08-20 20:42:56 -0500 | [diff] [blame] | 295 | |
Vince Lehman | 9f51efd | 2014-09-18 14:46:01 -0500 | [diff] [blame] | 296 | ; cert-to-publish "root.cert" ; optional, a file containing the root certificate |
| 297 | ; Only the router that is designated to publish the root cert |
| 298 | ; needs to specify this |
| 299 | |
| 300 | ; cert-to-publish "site.cert" ; optional, a file containing the site certificate |
| 301 | ; Only the router that is designated to publish the site cert |
| 302 | ; needs to specify this |
| 303 | |
| 304 | ; cert-to-publish "operator.cert" ; optional, a file containing the operator certificate |
| 305 | ; Only the router that is designated to publish the operator |
| 306 | ; cert needs to specify this |
| 307 | |
akmhoque | 50125a9 | 2014-06-30 08:54:17 -0500 | [diff] [blame] | 308 | cert-to-publish "router.cert" ; required, a file containing the router certificate. |
akmhoque | 157b0a4 | 2014-05-13 00:26:37 -0500 | [diff] [blame] | 309 | } |