Sample configuration file
The following is only a sample configuration file provided solely for your reference. You must create and modify your own configuration file according to the specific needs of your deployment.
Important |
The mandatory parameters are required to ensure that the critical pods such as CRD and Policy Engine are in the running state. |
config
datastore primary-endpoint connection-settings keep-alive keep-alive-time-ms 200
datastore primary-endpoint connection-settings channel count 4
datastore primary-endpoint connection-settings timeout-ms 500
datastore external-endpoints datastore
connection-settings keep-alive keep-alive-time-ms 200
connection-settings channel count 3
connection-settings timeout-ms 500
exit
ldap replicas 2
ldap server-set USD
search-user dn cn=sdcUser,dc=C-NTDB
search-user password $8$yx0jELXTK0f7CJO2XklpJx+CpCUIX13B9C5oQ4NEnaI=
health-check interval-ms 5000
health-check dn cn=sdcUser,dc=C-NTDB
health-check filter msisdn=918369110173
health-check attributes napCustType
initial-connections 10
max-connections 10
retry-count 2
retry-timer-ms 100
max-failover-connection-age-ms 60000
binds-per-second 0.2
number-consecutive-timeouts-for-bad-connection -1
missing-attribute-result-code 32
connection 192.0.2.18 389
priority 400
connection-rule ROUND_ROBIN
auto-reconnect true
timeout-ms 200
bind-timeout-ms 3000
exit
connection 192.0.2.18 390
priority 400
connection-rule ROUND_ROBIN
auto-reconnect true
timeout-ms 200
bind-timeout-ms 3000
exit
connection 192.0.2.18 391
priority 400
connection-rule ROUND_ROBIN
auto-reconnect true
timeout-ms 200
bind-timeout-ms 3000
exit
exit
//This is a mandatory parameter
db global-settings db-replica 3
//This is a mandatory parameter
db global-settings volume-storage-class local
db spr shard-count 1
db balance shard-count 1
debug tracing type DISABLED
debug logging default-level error
debug logging logger com.broadhop
level warn
exit
debug logging logger com.broadhop.custrefdata.impl.dao.GenericDao
level error
exit
debug logging logger com.broadhop.diameter2.policy.endpoints
level error
exit
debug logging logger com.broadhop.ldap
level error
exit
debug logging logger com.broadhop.microservices.control
level error
exit
debug logging logger com.broadhop.utilities.queue.redis
level error
exit
debug logging logger com.cisco
level warn
exit
debug logging logger com.cisco.diameter
level error
exit
debug logging logger com.cisco.diameter.endpoint
level error
exit
debug logging logger com.cisco.pcf
level debug
exit
debug logging logger com.cisco.pcf.endpoint.client
level error
exit
debug logging logger com.cisco.pcf.endpoint.client.Http2JettyRequestAsync
level error
exit
debug logging logger com.cisco.pcf.ldapserver
level warn
exit
debug logging logger com.cisco.pcf.nf.cache.NfCache
level warn
exit
debug logging logger io.prometheus.client
level error
exit
debug logging logger policy.engine
level debug
exit
debug logging logger rest.message
level warn
exit
features patching ingress-enabled true
diameter settings timeouts-ms dpa 5000
diameter application rx
application-id 16777236
tgpp-application true
vendor [ 10415 ]
exit
diameter group rx-protocol-1
endpoint-group rx-1
priority 50
endpoint rx-endpoint-1
priority 50
enabled true
host-name pcf-diameter-endpoint
port 3868
transport-protocol tcp
application [ rx ]
timers connection-timeout 30
timers watchdog 30
timers reconnect-timeout 30
exit
exit
exit
diameter service rx-service
bind 0.0.0.0:3868
group rx-protocol-1
application rx
transport-protocol tcp
exit
aaa authentication users user admin
uid 1117
gid 100
password $1$xyz$abcdefghijklmnopqrstuvwxyz
ssh_keydir /var/confd/homes/admin/.ssh
homedir /var/confd/homes/admin
exit
nacm groups group admin
user-name [ admin ]
exit
nacm groups group policy-admin
user-name [ admin ]
exit
nacm rule-list admin
group [ admin ]
rule any-access
action permit
exit
exit
nacm rule-list confd-api-manager
group [ confd-api-manager ]
rule any-access
action permit
exit
exit
nacm rule-list ops-center-security
group [ * ]
rule change-self-password
module-name ops-center-security
path /smiuser/change-self-password
access-operations exec
action permit
exit
rule smiuser
module-name ops-center-security
path /smiuser
access-operations exec
action deny
exit
exit
Feedback