vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

rpki: T6023: add support for CLI knobs expire-interval and retry-interval

Browse Source
This commit is contained in:
Christian Breunig 2024-02-07 21:17:56 +01:00
parent c30ebf59bd
commit 6b8c818559
1 changed files with 17 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
docs/configuration/protocols/rpki.rst
View File

@ -30,8 +30,8 @@ in :rfc:`8210`.
If you are new to these routing security technologies then there is an If you are new to these routing security technologies then there is an
`excellent guide to RPKI`_ by NLnet Labs which will get you up to speed `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed
very quickly. Their documentation explains everything from what RPKI is to very quickly. Their documentation explains everything from what RPKI is to
deploying it in production. It also has some deploying it in production. It also has some
`help and operational guidance`_ including "What can I do about my route `help and operational guidance`_ including "What can I do about my route
having an Invalid state?" having an Invalid state?"
*************** ***************
@ -109,6 +109,20 @@ Configuration
The default value is 300 seconds. The default value is 300 seconds.
.. cfgcmd:: set protocols rpki expire-interval <600-172800>
Set the number of seconds the router waits until the router
expires the cache.
The default value is 7200 seconds.
.. cfgcmd:: set protocols rpki retry-interval <1-7200>
Set the number of seconds the router waits until retrying to connect
to the cache server.
The default value is 600 seconds.
.. cfgcmd:: set protocols rpki cache <address> port <port> .. cfgcmd:: set protocols rpki cache <address> port <port>
Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching
@ -136,10 +150,6 @@ the connection.
SSH username to establish an SSH connection to the cache server. SSH username to establish an SSH connection to the cache server.
.. cfgcmd:: set protocols rpki cache <address> ssh known-hosts-file <filepath>
Local path that includes the known hosts file.
.. cfgcmd:: set protocols rpki cache <address> ssh private-key-file <filepath> .. cfgcmd:: set protocols rpki cache <address> ssh private-key-file <filepath>
Local path that includes the private key file of the router. Local path that includes the private key file of the router.
@ -148,7 +158,7 @@ the connection.
Local path that includes the public key file of the router. Local path that includes the public key file of the router.
.. note:: When using SSH, known-hosts-file, private-key-file and public-key-file .. note:: When using SSH, private-key-file and public-key-file
are mandatory options. are mandatory options.
******* *******