Question regarding conntrack-sync

Apachez · September 3, 2023, 4:21pm

According to the template at least in 1.4-rolling there is the option to through VyOS config to disable_external_cache:

vyos/vyos-1x/blob/current/data/templates/conntrackd/conntrackd.conf.j2

# autogenerated by conntrack_sync.py

# Synchronizer settings
Sync {
    Mode FTFW {
        DisableExternalCache {{ 'on' if disable_external_cache is vyos_defined else 'off' }}
    }
{% for iface, iface_config in interface.items() %}
{%     if iface_config.peer is vyos_defined %}
    UDP {
{%         if listen_address is vyos_defined %}
{%             for address in listen_address %}
        IPv4_address {{ address }}
{%             endfor %}
{%         endif %}
        IPv4_Destination_Address {{ iface_config.peer }}
        Port {{ iface_config.port if iface_config.port is vyos_defined else '3780' }}
        Interface {{ iface }}
        SndSocketBuffer {{ sync_queue_size | int *1024 *1024 }}
        RcvSocketBuffer {{ sync_queue_size | int *1024 *1024 }}

This file has been truncated. show original

set service conntrack-sync disable-external-cache

It also seems to exist for VyOS 1.3:

github.com

vyos/vyos-1x/blob/equuleus/data/templates/conntrackd/conntrackd.conf.tmpl

# autogenerated by conntrack_sync.py

# Synchronizer settings
Sync {
    Mode FTFW {
        DisableExternalCache {{ 'on' if disable_external_cache is defined else 'off' }}
    }
{% for iface, iface_config in interface.items() %}
{%   if loop.first %}
{%     if iface_config.peer is defined and iface_config.peer is not none %}
    UDP {
{%       if listen_address is defined and listen_address is not none %}
{%           for address in listen_address %}
        IPv4_address {{ address }}
{%           endfor %}
{%       endif %}
        IPv4_Destination_Address {{ iface_config.peer }}
        Port {{ iface_config.port if iface_config.port is defined else '3780' }}
{%     else %}
{%       set ip_address = iface | get_ipv4 %}

This file has been truncated. show original