SeRuntimeProperties

SeRuntimeProperties
SeRuntimeProperties
JSON Example
{
    "admin_ssh_enabled": false,
    "app_headers": [
        {
            "hdr_match_case": "string",
            "hdr_name": "string",
            "hdr_string_op": "string"
        }
    ],
    "baremetal_dispatcher_handles_flows": false,
    "connections_lossy_log_rate_limiter_threshold": 0,
    "connections_udfnf_log_rate_limiter_threshold": 0,
    "disable_flow_probes": false,
    "dos_profile": {
        "thresh_info": [
            {
                "attack": "string",
                "max_value": 0,
                "min_value": 0
            }
        ],
        "thresh_period": 0
    },
    "downstream_send_timeout": 0,
    "dp_aggressive_hb_frequency": 0,
    "dp_aggressive_hb_timeout_count": 0,
    "dp_hb_frequency": 0,
    "dp_hb_timeout_count": 0,
    "dupip_frequency": 0,
    "dupip_timeout_count": 0,
    "enable_hsm_log": false,
    "feproxy_vips_enable_proxy_arp": false,
    "flow_table_batch_push_frequency": 0,
    "global_mtu": 0,
    "http_rum_console_log": false,
    "http_rum_min_content_length": 0,
    "lbaction_num_requests_to_dispatch": 0,
    "lbaction_rq_per_request_max_retries": 0,
    "log_agent_compress_logs": false,
    "log_agent_file_sz_appl": 0,
    "log_agent_file_sz_conn": 0,
    "log_agent_file_sz_debug": 0,
    "log_agent_file_sz_event": 0,
    "log_agent_log_storage_min_sz": 0,
    "log_agent_max_concurrent_rsync": 0,
    "log_agent_max_storage_excess_percent": 0,
    "log_agent_max_storage_ignore_percent": "number",
    "log_agent_min_storage_per_vs": 0,
    "log_agent_sleep_interval": 0,
    "log_agent_unknown_vs_timer": 0,
    "log_message_max_file_list_size": 0,
    "ngx_free_connection_stack": false,
    "persistence_mem_max": 0,
    "scaleout_udp_per_pkt": false,
    "se_auth_ldap_bind_timeout": 0,
    "se_auth_ldap_cache_size": 0,
    "se_auth_ldap_connect_timeout": 0,
    "se_auth_ldap_conns_per_server": 0,
    "se_auth_ldap_reconnect_timeout": 0,
    "se_auth_ldap_request_timeout": 0,
    "se_auth_ldap_servers_failover_only": false,
    "se_dp_compression": {
        "max_low_rtt": 0,
        "min_high_rtt": 0,
        "min_length": 0,
        "mobile_str": [
            "string"
        ]
    },
    "se_dp_hm_drops": 0,
    "se_dp_if_state_poll_interval": 0,
    "se_dp_log_nf_enqueue_percent": 0,
    "se_dp_log_udf_enqueue_percent": 0,
    "se_dump_core_on_assert": false,
    "se_handle_interface_routes": false,
    "se_hb_persist_fudge_bits": 0,
    "se_mac_error_threshold_to_disable_promiscious": 0,
    "se_memory_poison": false,
    "se_metrics_interval": 0,
    "se_metrics_rt_enabled": false,
    "se_metrics_rt_interval": 0,
    "se_packet_buffer_max": 0,
    "se_random_tcp_drops": false,
    "se_rate_limiters": {
        "arp_rl": 0,
        "default_rl": 0,
        "flow_probe_rl": 0,
        "icmp_rl": 0,
        "icmp_rsp_rl": 0,
        "rst_rl": 0
    },
    "service_ip_subnets": [
        {
            "ip_addr": {
                "addr": "string",
                "type": "string"
            },
            "mask": 0
        }
    ],
    "service_port_ranges": [
        {
            "end": 0,
            "start": 0
        }
    ],
    "services_accessible_all_interfaces": false,
    "tcp_syncache_max_retransmit_default": 0,
    "upstream_connect_timeout": 0,
    "upstream_connpool_cache_thresh": 0,
    "upstream_connpool_conn_idle_thresh_tmo": 0,
    "upstream_connpool_core_max_cache": 0,
    "upstream_connpool_enable": false,
    "upstream_keepalive": false,
    "upstream_read_timeout": 0,
    "upstream_send_timeout": 0,
    "user_defined_metric_age": 0
}
boolean
admin_ssh_enabled
Optional
Constraints: default: true

Allow admin user ssh access to SE. Field introduced in 18.2.5. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

array of AppHdr
app_headers
Optional

Allowed in Enterprise edition with any value, Enterprise with Cloud Services edition.

boolean
baremetal_dispatcher_handles_flows
Optional

Deprecated in 21.1.3. Use config in ServiceEngineGroup instead. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As int32 As int32
connections_lossy_log_rate_limiter_threshold
Optional
Constraints: default: 1000

Rate limit on maximum adf lossy log to pushper second. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- 1000), Basic edition(Allowed values- 1000), Enterprise with Cloud Services edition.

integer As int32 As int32
connections_udfnf_log_rate_limiter_threshold
Optional
Constraints: default: 1000

Rate limit on maximum adf udf or nf log to pushper second. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- 1000), Basic edition(Allowed values- 1000), Enterprise with Cloud Services edition.

boolean
disable_flow_probes
Optional

Disable Flow Probes for Scaled out VS'es. (This field has been moved to se_group properties 20.1.3 onwards.). Field introduced in 17.1.1. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

dos_profile
Optional

dos_profile

integer As uint32 As uint32
downstream_send_timeout
Optional
Constraints: default: 3600000

Timeout for downstream to become writable. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
dp_aggressive_hb_frequency
Optional
Constraints: default: 100

Frequency of SE - SE HB messages when aggressive failure mode detection is enabled. (This field has been moved to se_group properties 20.1.3 onwards). Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- 100), Basic edition(Allowed values- 100), Enterprise with Cloud Services edition.

integer As uint32 As uint32
dp_aggressive_hb_timeout_count
Optional
Constraints: default: 10

Consecutive HB failures after which failure is reported to controller,when aggressive failure mode detection is enabled. (This field has been moved to se_group properties 20.1.3 onwards). Allowed in Enterprise edition with any value, Essentials edition(Allowed values- 10), Basic edition(Allowed values- 10), Enterprise with Cloud Services edition.

integer As uint32 As uint32
dp_hb_frequency
Optional
Constraints: default: 100

Frequency of SE - SE HB messages when aggressive failure mode detection is not enabled. (This field has been moved to se_group properties 20.1.3 onwards). Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
dp_hb_timeout_count
Optional
Constraints: default: 10

Consecutive HB failures after which failure is reported to controller, when aggressive failure mode detection is not enabled. (This field has been moved to se_group properties 20.1.3 onwards). Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
dupip_frequency
Optional

Frequency of ARP requests sent by SE for each VIP to detect duplicate IP when it loses conectivity to controller. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
dupip_timeout_count
Optional
Constraints: default: 5

Number of ARP responses received for the VIP after which SE decides that the VIP has been moved and disables the VIP. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
enable_hsm_log
Optional

Enable HSM luna engine logs. Field introduced in 16.4.8, 17.1.11, 17.2.3. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
feproxy_vips_enable_proxy_arp
Optional
Constraints: default: true

Enable proxy ARP from Host interface for Front End proxies. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
flow_table_batch_push_frequency
Optional
Constraints: default: 5

How often to push the flow table IPC messages in the main loop. The value is the number of times through the loop before pushing the batch. i.e, a value of 1 means every time through the loop. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
global_mtu
Optional

Overrides the MTU value received via DHCP or some other means. Use this when the infrastructure advertises an MTU that is not supported by all devices in the network. For example, in AWS or when an overlay is used. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
http_rum_console_log
Optional

Enable Javascript console logs on the client browser when collecting client insights. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- false), Basic edition(Allowed values- false), Enterprise with Cloud Services edition.

integer As uint32 As uint32
http_rum_min_content_length
Optional
Constraints: default: 64

Minimum response size content length to sample for client insights. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- 64), Basic edition(Allowed values- 64), Enterprise with Cloud Services edition.

integer As uint32 As uint32
lbaction_num_requests_to_dispatch
Optional
Constraints: default: 4

Number of requests to dispatch from the request queue at a regular interval. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
lbaction_rq_per_request_max_retries
Optional
Constraints: default: 22

Maximum retries per request in the request queue. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
log_agent_compress_logs
Optional
Constraints: default: true

Deprecated in 21.1.1. Flag to indicate if log files are compressed upon full on the Service Engine. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_file_sz_appl
Optional
Constraints: default: 4

Deprecated in 21.1.1. Maximum application log file size before rollover. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_file_sz_conn
Optional
Constraints: default: 4

Deprecated in 21.1.1. Maximum connection log file size before rollover. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_file_sz_debug
Optional
Constraints: default: 4

Deprecated in 21.1.1. Maximum debug log file size before rollover. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_file_sz_event
Optional
Constraints: default: 4

Deprecated in 21.1.1. Maximum event log file size before rollover. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_log_storage_min_sz
Optional
Constraints: default: 1024

Deprecated in 21.1.1. Minimum storage allocated for logs irrespective of memory and cores. Unit is MB. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_max_concurrent_rsync
Optional
Constraints: default: 1024

Deprecated in 21.1.1. Maximum concurrent rsync requests initiated from log-agent to the Controller. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_max_storage_excess_percent
Optional
Constraints: default: 110

Deprecated in 21.1.1. Excess percentage threshold of disk size to trigger cleanup of logs on the Service Engine. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

number As float As float
log_agent_max_storage_ignore_percent
Optional
Constraints: default: 20

Deprecated in 21.1.1. Maximum storage on the disk not allocated for logs on the Service Engine. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_min_storage_per_vs
Optional
Constraints: default: 10

Deprecated in 21.1.1. Minimum storage allocated to any given VirtualService on the Service Engine. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_sleep_interval
Optional
Constraints: default: 10

Deprecated in 21.1.1. Internal timer to stall log-agent and prevent it from hogging CPU cycles on the Service Engine. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_agent_unknown_vs_timer
Optional
Constraints: default: 1800

Deprecated in 21.1.1. Timeout to purge unknown Virtual Service logs from the Service Engine. Unit is SEC. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
log_message_max_file_list_size
Optional
Constraints: default: 64

Deprecated in 21.1.1. Maximum number of file names in a log message. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
ngx_free_connection_stack
Optional

Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
persistence_mem_max
Optional

Maximum memory in bytes allocated for persistence entries. Allowed values are 0-33554432. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
scaleout_udp_per_pkt
Optional
Constraints: default: true

Enable punting of UDP packets from primary to other Service Engines. This applies to Virtual Services with Per-Packet Loadbalancing enabled. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_auth_ldap_bind_timeout
Optional
Constraints: default: 5000

LDAP basicauth default bind timeout enforced on connections to LDAP server. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_auth_ldap_cache_size
Optional
Constraints: default: 100000

Size of LDAP basicauth credentials cache used on the dataplane. Unit is BYTES. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_auth_ldap_connect_timeout
Optional
Constraints: default: 10000

LDAP basicauth default connection timeout enforced on connections to LDAP server. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_auth_ldap_conns_per_server
Optional
Constraints: default: 1

Number of concurrent connections to LDAP server by a single basic auth LDAP process. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_auth_ldap_reconnect_timeout
Optional
Constraints: default: 10000

LDAP basicauth default reconnect timeout enforced on connections to LDAP server. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_auth_ldap_request_timeout
Optional
Constraints: default: 10000

LDAP basicauth default login or group search request timeout enforced on connections to LDAP server. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
se_auth_ldap_servers_failover_only
Optional

LDAP basicauth uses multiple ldap servers in the event of a failover only. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

se_dp_compression
Optional

se_dp_compression

integer As int32 As int32
se_dp_hm_drops
Optional

Deprecated - This field has been moved to se_group properties 20.1.3 onwards. Internal only. Used to simulate SE - SE HB failure. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_dp_if_state_poll_interval
Optional
Constraints: default: 10

Deprecated in 21.1.3. Use config in ServiceEngineGroup instead. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_dp_log_nf_enqueue_percent
Optional
Constraints: default: 70

Deprecated in 21.1.1. Internal buffer full indicator on the Service Engine beyond which the unfiltered logs are abandoned. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_dp_log_udf_enqueue_percent
Optional
Constraints: default: 90

Deprecated in 21.1.1. Internal buffer full indicator on the Service Engine beyond which the user filtered logs are abandoned. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
se_dump_core_on_assert
Optional

Deprecated in 21.1.3. Use config in ServiceEngineGroup instead. Field introduced in 18.1.3, 18.2.1. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
se_handle_interface_routes
Optional

Accept/ignore interface routes (i.e, no next hop IP address). Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_hb_persist_fudge_bits
Optional
Constraints: default: 3

Internal use only. Allowed values are 0-7. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_mac_error_threshold_to_disable_promiscious
Optional
Constraints: default: 1000

Number of packets with wrong mac after which SE attempts to disable promiscious mode. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
se_memory_poison
Optional
Constraints: default: true

Internal use only. Enables poisoning of freed memory blocks. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_metrics_interval
Optional
Constraints: default: 60000

Internal use only. Frequency (ms) of metrics updates from SE to controller. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- 60000), Basic edition(Allowed values- 60000), Enterprise with Cloud Services edition.

boolean
se_metrics_rt_enabled
Optional
Constraints: default: true

Internal use only. Enable or disable real time metrics irrespective of virtualservice or SE group configuration. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- false), Basic edition(Allowed values- false), Enterprise with Cloud Services edition. Special default for Essentials edition is false, Basic edition is false, Enterprise is True.

integer As uint32 As uint32
se_metrics_rt_interval
Optional
Constraints: default: 1000

Internal use only. Frequency (ms) of realtime metrics updates from SE to controller. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
se_packet_buffer_max
Optional

Deprecated in 21.1.3. Use config in ServiceEngineGroup instead. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
se_random_tcp_drops
Optional

Internal use only. If enabled, randomly packets are dropped. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

se_rate_limiters
Optional

se_rate_limiters

service_ip_subnets
Optional

IP ranges on which there may be virtual services (for configuring iptables/routes). Maximum of 128 items allowed. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

array of PortRange
service_port_ranges
Optional

Port ranges on which there may be virtual services (for configuring iptables). Applicable in container ecosystems like Mesos. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
services_accessible_all_interfaces
Optional

Make service ports accessible on all Host interfaces in addition to East-West VIP and/or bridge IP. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
tcp_syncache_max_retransmit_default
Optional
Constraints: default: 4

Default value for max number of retransmissions for a SYN packet. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
upstream_connect_timeout
Optional
Constraints: default: 3600000

Timeout for backend connection. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As int32 As int32
upstream_connpool_cache_thresh
Optional
Constraints: default: -1

L7 Upstream Connection pool cache threshold in percentage. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As int32 As int32
upstream_connpool_conn_idle_thresh_tmo
Optional
Constraints: default: -1

Idle timeout value for a connection in the upstream connection pool, when the current cache size is above the threshold. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As int32 As int32
upstream_connpool_core_max_cache
Optional
Constraints: default: -1

L7 Upstream Connection pool max cache size per core. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
upstream_connpool_enable
Optional
Constraints: default: true

Enable upstream connection pool. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean
upstream_keepalive
Optional

Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
upstream_read_timeout
Optional
Constraints: default: 3600000

Timeout for data to be received from backend. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32
upstream_send_timeout
Optional
Constraints: default: 3600000

Timeout for upstream to become writable. Unit is MILLISECONDS. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- 3600000), Basic edition(Allowed values- 3600000), Enterprise with Cloud Services edition.

integer As uint32 As uint32
user_defined_metric_age
Optional
Constraints: default: 60

Defines in seconds how long before an unused user-defined-metric is garbage collected. Field introduced in 17.1.5. Unit is SEC. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

Property Of