Listen addresses for this virtual host

This is a rule that the target address is to match against

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4

Specifies the IP address version (IPv4 or IPv6) used to establish a connection between cloudflared and the Cloudflare global network

Listen only on IPv4 when strting the server.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Listen addresses for this virtual host

The email addresses of the public-inbox.

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Listen addresses for this virtual host

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

Configures name servers used to resolve names of upstream servers into addresses

This address will be used for zone-transfer requests if configured as a secondary server or notifications in case of a primary server

Whether to enable setting IPv4 A records.

A list of addresses to be added to the network section of the unit

Automatically determine the IPv4 address of this peer based on existing peers on network.

List of additional peer IP addresses to connect to.

Subnet mask of the interface, specified as the number of bits in the prefix ("24").

Specifies the BSSID for this BSS

Wait for DNS

IP detection provider for IPv4

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

If given an IP address, it can be a host name ("localhost"), an IPv4 dotted-quad ("127.0.0.1") or an IPv6 address enclosed in square brackets ("[::1]").

(VCL4.1 and higher) If given an absolute Path ("/path/to/listen.sock") or "@" followed by the name of an abstract socket ("@myvarnishd") accept connections on a Unix domain socket

Set name cache size for IPv4.

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

List of the only peer IP addresses to connect to

List of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config

Name of the interface.

Specifies whether sshd(8) should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address

The hostname that clients should use to connect to this server

IP addresses to bind the listener to.

Whether to register mDNS address records for all local IP addresses.

Line-separated email addresses that are allowed to authenticate.

Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols.

Whether to copy the DF bit to the outer IPv4 header in tunnel mode

Mail addresses

List of named IP pools to allocate virtual IP addresses and other configuration attributes from

Addresses of statically configured query API servers

Name of the interface

Listener addresses to accept connections from other peers

Name used to derive peer unit name.

A list of host:port for the Redis servers that are part of a cluster

List of resolvers to use

This option specifies when the dhcpcd service will fork to background

Database host name. localhost is treated specially and inserts systemd dependencies, other hostnames or IP addresses of the local machine do not.

MTU size for packets leaving the interface

The interfaces to bond together

Commands called at the start of the interface setup.

Vlan tag to apply to interface

Openvswitch type to assign to interface

IPsec Mode to establish CHILD_SA with.

• tunnel negotiates the CHILD_SA in IPsec Tunnel Mode,
• whereas transport uses IPsec Transport Mode.
• transport_proxy signifying the special Mobile IPv6 Transport Proxy Mode.
• beet is the Bound End to End Tunnel mixture mode, working with fixed inner addresses without the need to include them in each packet.
• Both transport and beet modes are subject to mode negotiation; tunnel mode is negotiated if the preferred mode is not available.
• pass and drop are used to install shunt policies which explicitly bypass the defined traffic from IPsec processing or drop it, respectively

The type of the interface

Commands called after the interface setup.

The type of interface to create

Command called before the interface is taken down.

16-bit port for listening

Peers linked to the interface.

Command called after the interface is taken down.

List of extra IPv6 static routes that will be assigned to the interface.

The physical network interfaces connected by the bridge.

Whether to enable wol on this interface.

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

IPv6 address of the next hop.

The kernel routing table to add this interface's associated routes to

Whether this interface is virtual and should be created by tunctl

MAC address of the interface

The Wake-on-LAN policy to set for the device

Type of the route

In case of a virtual device, the user who owns it. null will not set owner, allowing access to any user.

wg-quick .conf file, describing the interface

The base64 public key to the peer.

Base64 private key generated by wg genkey

Private key file as generated by wg genkey.

The physical network interfaces connected by the vSwitch.

Extra options to append to the interface section

IPv6 address of the network.

The type of the interface

Name of the UKI

16-bit port for listening

Peers linked to the interface.

Set the maximum transmission unit in bytes for the wireguard interface

Whether to bring up this interface automatically during boot.

Other route options

This option allows you to define interfaces encapsulating IPv6 packets within IPv4 packets; which should be automatically created.

Commands called at the start of the interface setup.

Endpoint IP or hostname of the peer, followed by a colon, and then a port number of the peer.

Mark all wireguard packets originating from this interface with the given firewall mark

Commands called at the end of the interface setup.

Subnet mask of the network, specified as the number of bits in the prefix (64).

Set the metric of routes related to this Wireguard interface.

The kernel routing table to add this interface's associated routes to

List of open UDP ports.

List of TCP ports on which incoming connections are accepted.

Whether to enable Jool, an Open Source implementation of IPv4/IPv6 translation on Linux

Specify address family of backend connections

The base64 public key of the peer.

Username to authenticate with.

Base64 private key generated by wg genkey

The name of the user account

Private key file as generated by wg genkey.