ifstate.conf

Type: object No Additional Properties

IfState Configuration Schema

Type: object No Additional Properties

global configuration settings

Type: object

Type: object No Additional Properties

overrides per interface sysctl settings in /proc/sys/net/ipv*/conf/all/

Type: object

settings in /proc/sys/net/ipv4/*/conf/

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: object No Additional Properties

settings in /proc/sys/net/ipv6/*/conf/

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: string

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: object No Additional Properties

default per interface sysctl settings in /proc/sys/net/ipv*/conf/default/

Type: object

settings in /proc/sys/net/ipv4/*/conf/

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: object No Additional Properties

settings in /proc/sys/net/ipv6/*/conf/

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: string

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: object No Additional Properties

ignore patterns to skip interface, ip address or routing objects

Type: array of string

list of ip address prefixes to be ignored

Each item of this array must be:

Type: string

ip address with prefix length


Example:

"fe80::/10"

Type: array of string

list of ip address prefixes to be ignored

Each item of this array must be:

Type: string

ip address with prefix length


Example:

"fe80::/10"

Type: boolean Default: true

ignore dynamic assigned ip addresses

Type: array of string

interface names matching this list of regex will be ignored

Each item of this array must be:

Type: string

regex to match interface name


Examples:

"^br-[\\da-f]{12}"
"^docker\\d+"
"^lo$"
"^ppp\\d+$"
"^veth"
"^virbr\\d+"
"^vrrp\\d*\\.\\d+$"

Type: array of string

interface names matching this list of regex will be ignored

Each item of this array must be:

Type: string

regex to match interface name


Examples:

"^br-[\\da-f]{12}"
"^docker\\d+"
"^lo$"
"^ppp\\d+$"
"^veth"
"^virbr\\d+"
"^vrrp\\d*\\.\\d+$"

Type: array of object

filter routes by options

Each item of this array must be:

Type: object No Additional Properties

Type: integer or string

Type: integer or string Default: "boot"

Type: integer or string

Type: integer or string

Type: integer or string Default: "main"

Type: string

Type: string

Type: array of object

filter routes by options

Each item of this array must be:

Type: object No Additional Properties

Type: integer or string

Type: integer or string Default: "boot"

Type: integer or string

Type: integer or string

Type: integer or string Default: "main"

Type: string

Type: string

Type: array of object

filter rules by options

Each item of this array must be:

Type: object No Additional Properties

Type: enum (of string) Default: "to_tbl"

the type of this rule

Must be one of:

  • "to_tbl"
  • "blackhole"
  • "unreachable"
  • "prohibit"

Type: integer or string

Type: integer

the priority of this rule

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: string

select the source prefix to match

Type: string

select the destination prefix to match

Type: string

select the incoming device to match

Type: string

select the outgoing device to match

Type: integer or string Default: "unspec"

routing protocol number (/etc/iproute2/rt_protos)

Type: integer

select the fwmark value to match

Type: integer or string

select the ip protocol to match

Type: array of object

filter rules by options

Each item of this array must be:

Type: object No Additional Properties

Type: enum (of string) Default: "to_tbl"

the type of this rule

Must be one of:

  • "to_tbl"
  • "blackhole"
  • "unreachable"
  • "prohibit"

Type: integer or string

Type: integer

the priority of this rule

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: string

select the source prefix to match

Type: string

select the destination prefix to match

Type: string

select the incoming device to match

Type: string

select the outgoing device to match

Type: integer or string Default: "unspec"

routing protocol number (/etc/iproute2/rt_protos)

Type: integer

select the fwmark value to match

Type: integer or string

select the ip protocol to match

Type: array of object

list of interface settings (link settings and ip addresses)

Each item of this array must be:

Type: object No Additional Properties

Type: string

name of the interface

Type: array of string

ip addresses of the interface

Each item of this array must be:

Type: string
Examples:

"192.0.2.1"
"192.168.0.1/24"
"2001:db8::1/64"

Type: object No Additional Properties

interface depending on vrrp status

Type: string

related vrrp INSTANCE or GROUP name

Type: enum (of string)

failover type

Must be one of:

  • "instance"
  • "group"

Type: array

states at which the interface should be configured

Each item of this array must be:

Type: object

Type: object No Additional Properties

interface sysctl settings in /proc/sys/net/ipv*/conf/{IFACE}/

Type: object

settings in /proc/sys/net/ipv4/*/conf/

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: object No Additional Properties

settings in /proc/sys/net/ipv6/*/conf/

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: string

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: object No Additional Properties

network driver and hardware settings via ethtool(8)

Type: object No Additional Properties

pause parameters

Type: enum (of string or boolean)

enable pause autonegotiation

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable Rx pause

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable Tx pause

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: object No Additional Properties

interrupt coalescing

Type: enum (of string or boolean)

enable pause autonegotiation

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable pause autonegotiation

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: object No Additional Properties

rx/tx ring parameters

Type: integer

number of ring entries for the Rx ring

Type: integer

number of ring entries for the Rx Mini ring

Type: integer

number of ring entries for the Rx Jumbo ring

Type: integer

number of ring entries for the Tx ring

Type: object No Additional Properties

offload parameters and other features

Type: enum (of string or boolean)

enable RX checksumming

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable TX checksumming

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable scatter-gather

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable TCP segmentation offload

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable UDP fragmentation offload

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable generic segmentation offload

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable generic receive offload

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable large receive offload

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable RX VLAN acceleration

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable TX VLAN acceleration

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable Rx ntuple filters and actions

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable receive hashing offload

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: object No Additional Properties

device settings

Type: integer

speed in Mbps

Type: enum (of string)

full or half duplex mode

Must be one of:

  • "half"
  • "full"

Type: enum (of string)

device port selection

Must be one of:

  • "tp"
  • "aui"
  • "bnc"
  • "mii"

Type: enum (of string or boolean)

MDI-X mode for port

Must be one of:

  • "auto"
  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

enable autonegotation

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: integer

speed and duplex advertised by autonegotation

Type: integer

PHY address

Type: enum (of string)

transceiver type

Must be one of:

  • "internal"
  • "external"

Type: string

Wake-on-LAN options

Must match regular expression: ^[pumbagsfd]+$

Type: string

SecureOn™ password

Must match regular expression: ^[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}$

driver message flags

Type: integer

driver message flags by number

Type: array

driver message flags by name

Each item of this array must be:

Type: object

Type: object No Additional Properties

number of channels

Type: integer

number of channels with only receive queues

Type: integer

number of channels with only transmit queues

Type: integer

number of channels used only for other purposes

Type: integer

number of multi-purpose channels

Type: object No Additional Properties

Energy-Efficient Ethernet (according to the IEEE 802.3az specifications)

Type: enum (of string or boolean)

enable EEE support

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: enum (of string or boolean)

assert Tx LPI

Must be one of:

  • "on"
  • "off"
  • true
  • false

Type: integer

sets the speed for which EEE should be enabled (see also change.advertise)

Type: integer

amount of idle time prior asserting Tx LPI (in microseconds)

Type: object No Additional Properties

PHY tunable parameters

enable downshift

Type: enum (of string or boolean)

enable downshift

Must be one of:

  • "on"
  • "off"
  • true
  • false
Type: array

Must contain a minimum of 3 items

Must contain a maximum of 3 items

Each item of this array must be:

Type: object

enable Energy Detect Power Down (EDPD)

Type: enum (of string or boolean)

enable EDPD

Must be one of:

  • "on"
  • "off"
  • true
  • false
Type: array

Must contain a minimum of 3 items

Must contain a maximum of 3 items

Each item of this array must be:

Type: object

Type: object

private flags

Type: object No Additional Properties

Forward Error Correction

Type: enum (of string)

FEC encoding

Must be one of:

  • "auto"
  • "off"
  • "RS"
  • "BaseR"
  • "LLRS"

Type: object No Additional Properties

settings for traffic control

Type: boolean

enable the ingress qdisc for policing and shaping in ingress

root queueing disciplines

Type: object

generic classless qdisc

Type: enum (of string)

qdisk type

Must be one of:

  • "gred"
  • "hhf"
  • "mqprio"
  • "multiq"
  • "netem"
  • "pfifo_fast"
  • "pie"
  • "red"
  • "sfb"
  • "sfq"
  • "tbf"
Type: object

cake - common applications kept enhanced (CAKE)

Type: enum (of string)

qdisk type

Must be one of:

  • "cake"

Type: string

unique id

Type: enum (of string or boolean)

ACKnowledge filter

Must be one of:

  • "aggressive"
  • true
  • false

Type: enum (of string or boolean)

ATM mode

Must be one of:

  • "ptm"
  • true
  • false

Type: boolean

autorate-ingress

Type: enum (of string)

diffserv mode

Must be one of:

  • "diffserv3"
  • "diffserv4"
  • "diffserv8"
  • "besteffort"
  • "precedence"

Type: boolean

ingress

Type: integer

overhead

Value must be greater or equal to -64 and lesser or equal to 256

Type: enum (of string)

flow mode

Must be one of:

  • "flowblind"
  • "srchost"
  • "dsthost"
  • "hosts"
  • "flows"
  • "dual-srchost"
  • "dual-dsthost"
  • "triple-isolated"

Type: integer

fwmark

Value must be greater or equal to 0

Type: integer

memlimit

Value must be greater or equal to 0

Type: integer

MPU

Value must be greater or equal to 0 and lesser or equal to 256

Type: boolean

NAT

Type: boolean

RAW

Type: enum (of string)

well-known RTT

Must be one of:

  • "datacentre"
  • "lan"
  • "metro"
  • "regional"
  • "internet"
  • "oceanic"
  • "satellite"
  • "interplanetary"
Type: integer

manually specify an RTT (us)

Value must be greater or equal to 1

Type: boolean

split GSO

Type: integer

target

Value must be greater or equal to 1

Type: boolean

wash

Type: object

choke - choose and keep scheduler

The following properties are required:

  • limit
  • min
  • max
  • avpkt
  • burst
  • probability

Type: enum (of string)

qdisk type

Must be one of:

  • "choke"
Type: object

CoDel - Controlled-Delay Active Queue Management algorithm

Type: enum (of string)

qdisk type

Must be one of:

  • "codel"
Type: object No Additional Properties

bfifo - Byte limited First In, First Out queue; pfifo - Packet limited First In, First Out queue

Type: enum (of string)

qdisk type

Must be one of:

  • "bfifo"
  • "pfifo"

Type: number

queue size in bytes or packets

Type: object

fq - Fair Queue traffic policing

Type: enum (of string)

qdisk type

Must be one of:

  • "fq"

Type: number

hard limit on the real queue size (number of packets)

Type: number

hard limit on the max number of packets per flow

Type: object

fq_codel - Fair Queuing (FQ) with Controlled Delay (CoDel)

Type: enum (of string)

qdisk type

Must be one of:

  • "fq_codel"

Type: number

hard limit on the real queue size (number of packets)

Type: number

number of flows

Type: object

generic classful qdisc

Type: enum (of string)

qdisk type

Must be one of:

  • "atm"
  • "cbq"
  • "drr"
  • "dsmark"
  • "hfsc"
  • "htb"
  • "prio"
  • "qfq"
Type: object

classful multiqueue dummy scheduler

Type: enum (of string)

qdisk type

Must be one of:

  • "mq"

Type: array

list child qdiscs for each device TX queue

Each item of this array must be:

child qdiscs for the nth device TX queue

Same definition as interfaces_items_tc_qdisc

Type: string

unique id

Type: array of object

filter used by qdiscs

Each item of this array must be:

Type: object No Additional Properties

basic - basic traffic control filter

Type: enum (of string)

Must be one of:

  • "basic"

Type: string or integer Default: 3

protocol selector

Type: integer

priority

Value must be greater or equal to 0 and lesser or equal to 65535

Type: array of object

traffic control filter action

Each item of this array must be:

Type: object No Additional Properties

mirred - mirror/redirect action

Type: enum (of string)

Must be one of:

  • "mirred"

Type: enum (of string)

packet direction

Must be one of:

  • "ingress"
  • "egress"

Type: enum (of string)

copy (mirror) or move (redirect) packets to the destination interface

Must be one of:

  • "mirror"
  • "redirect"

Type: integer or string

destination interface where packets are redirected or mirrored to

Type: integer

unique action ID

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: enum (of string)

Must be one of:

  • "mirred"

Type: object

match packets using the extended match infrastructure

flow - flow based traffic control filter

Type: object

The following properties are required:

  • kind

Type: enum (of string)

filter mode

Must be one of:

  • "map"

Type: enum (of string)

map to class ID by key

Must be one of:

  • "src"
  • "dst"
  • "proto"
  • "proto-src"
  • "proto-dst"
  • "iif"
  • "priority"
  • "mark"
  • "nfct"
  • "nfct-src"
  • "nfct-dst"
  • "nfct-proto-src"
  • "nfct-proto-dst"
  • "rt-classid"
  • "sk-uid"
  • "sk-gid"
  • "vlan-tag"
  • "rxhash"
Type: object

The following properties are required:

  • kind

Type: enum (of string)

filter mode

Must be one of:

  • "hash"

Type: array of enum (of string)

hash over keys for class ID calculation

Each item of this array must be:

Type: enum (of string)

Must be one of:

  • "src"
  • "dst"
  • "proto"
  • "proto-src"
  • "proto-dst"
  • "iif"
  • "priority"
  • "mark"
  • "nfct"
  • "nfct-src"
  • "nfct-dst"
  • "nfct-proto-src"
  • "nfct-proto-dst"
  • "rt-classid"
  • "sk-uid"
  • "sk-gid"
  • "vlan-tag"
  • "rxhash"

Type: integer

rehashing interval (in seconds)

Value must be greater or equal to 0 and lesser or equal to 294967295

Type: enum (of string)

Must be one of:

  • "flow"

Type: string or integer Default: 3

protocol selector

Type: integer

priority

Value must be greater or equal to 0 and lesser or equal to 65535

Type: array of object

traffic control filter action

Each item of this array must be:

Type: object No Additional Properties

mirred - mirror/redirect action

Type: enum (of string)

Must be one of:

  • "mirred"

Type: enum (of string)

packet direction

Must be one of:

  • "ingress"
  • "egress"

Type: enum (of string)

copy (mirror) or move (redirect) packets to the destination interface

Must be one of:

  • "mirror"
  • "redirect"

Type: integer or string

destination interface where packets are redirected or mirrored to

Type: integer

unique action ID

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: enum (of string)

Must be one of:

  • "mirred"

Type: integer Default: 1

offset for the class ID calculation

Value must be greater or equal to 0 and lesser or equal to 65535

Type: integer

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: integer

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: integer

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: integer

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: integer

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: integer

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: object No Additional Properties

fw - fwmark traffic control filter

Type: enum (of string)

Must be one of:

  • "fw"

Type: string or integer Default: 3

protocol selector

Type: integer

priority

Value must be greater or equal to 0 and lesser or equal to 65535

Type: array of object

traffic control filter action

Each item of this array must be:

Type: object No Additional Properties

mirred - mirror/redirect action

Type: enum (of string)

Must be one of:

  • "mirred"

Type: enum (of string)

packet direction

Must be one of:

  • "ingress"
  • "egress"

Type: enum (of string)

copy (mirror) or move (redirect) packets to the destination interface

Must be one of:

  • "mirror"
  • "redirect"

Type: integer or string

destination interface where packets are redirected or mirrored to

Type: integer

unique action ID

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: enum (of string)

Must be one of:

  • "mirred"

Type: integer

fwmark (iptables) to match

Value must be greater or equal to 0

Type: object No Additional Properties

matchall - traffic control filter that matches every packet

Type: enum (of string)

Must be one of:

  • "matchall"

Type: string

unique id

Type: string or integer Default: 3

protocol selector

Type: integer

priority

Value must be greater or equal to 0 and lesser or equal to 65535

Type: array of object

traffic control filter action

Each item of this array must be:

Type: object No Additional Properties

mirred - mirror/redirect action

Type: enum (of string)

Must be one of:

  • "mirred"

Type: enum (of string)

packet direction

Must be one of:

  • "ingress"
  • "egress"

Type: enum (of string)

copy (mirror) or move (redirect) packets to the destination interface

Must be one of:

  • "mirror"
  • "redirect"

Type: integer or string

destination interface where packets are redirected or mirrored to

Type: integer

unique action ID

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: enum (of string)

Must be one of:

  • "mirred"

Type: integer

push matching packets into class

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: integer

process flags (1: SKIPHW, 2: SKIPSW)

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: enum (of string)

filter type

Must be one of:

  • "basic"
  • "flow"
  • "fw"
  • "matchall"

Type: object No Additional Properties

settings for WireGuard interfaces

Type: string

local private key (consider to use the !include tag to read the key from file)

Type: integer

port for listening

Value must be greater or equal to 0 and lesser or equal to 65535

Type: integer

fwmark for outgoing packets

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: array of object

list of peer definitions

Each item of this array must be:

Type: object No Additional Properties

Type: string

the peer's public key

Type: string

preshared key for post-quantum resistance (consider to use the !include tag to read the key from file)

Type: string

initial endpoint IP or hostname

Type: integer

keepalive interval seconds

Value must be greater or equal to 0 and lesser or equal to 65535

Type: array of string

list of prefixes in CIDR notation

Each item of this array must be:

Type: string

Type: object No Additional Properties

Type: array of object

Each item of this array must be:

Type: object No Additional Properties

Type: enum (of string) Default: "unicast"

the type of this route

Must be one of:

  • "unicast"
  • "local"
  • "broadcast"
  • "anycast"
  • "multicast"
  • "blackhole"
  • "unreachable"
  • "prohibit"
  • "throw"
  • "nat"
  • "xresolve"

Type: integer or string

the output device name

Type: integer or string Default: "boot"

the routing protool identifier of this route

Type: integer or string

the realm to which this route is assigned

Type: integer or string

the scope of the destinations covered by the route prefix

Type: integer or string Default: "main"

the table to add this route to

Type: string

the destination prefix of the route

Type: string

address of the nexthop router

Type: string

the source address to prefer

Type: integer Default: 0

preference of the route

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: array of object

Each item of this array must be:

Type: object No Additional Properties

If the conditions in the "If" tab are respected, then the conditions in the "Then" tab should be respected. Otherwise, the conditions in the "Else" tab should be respected.

Type: object

Type: const Specific value: "to_tbl"
Type: object

The following properties are required:

  • table
  • priority
Type: object

The following properties are required:

  • priority

Type: enum (of string) Default: "to_tbl"

the type of this rule

Must be one of:

  • "to_tbl"
  • "blackhole"
  • "unreachable"
  • "prohibit"

Type: integer or string

Type: integer

the priority of this rule

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: string

select the source prefix to match

Type: string

select the destination prefix to match

Type: string

select the incoming device to match

Type: string

select the outgoing device to match

Type: integer or string Default: "unspec"

routing protocol number (/etc/iproute2/rt_protos)

Type: integer

select the fwmark value to match

Type: integer or string

select the ip protocol to match