mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-08-27 12:30:13 +03:00
5f4ac38434
Switch ubridge_control_transport from tcp (-H) to unix (-U), the AF_UNIX + SO_PEERCRED channel recommended on Linux for kernel-level peer authentication. tcp is retained as an opt-in for backward compatibility. Existing deployments that set the key explicitly are unaffected; only fresh installs / unset keys pick up the new default.
211 lines
7.5 KiB
Plaintext
211 lines
7.5 KiB
Plaintext
[Controller]
|
|
|
|
; Options for JWT tokens (user authentication)
|
|
jwt_secret_key = efd08eccec3bd0a1be2e086670e5efa90969c68d07e072d7354a76cea5e33d4e
|
|
jwt_algorithm = HS256
|
|
jwt_access_token_expire_minutes = 1440
|
|
jwt_refresh_token_expire_minutes = 43200
|
|
|
|
; Initial default super admin username
|
|
; It cannot be changed once the controller has started once
|
|
default_admin_username = admin
|
|
|
|
; Initial default super admin password
|
|
; It cannot be changed once the controller has started once
|
|
default_admin_password = admin
|
|
|
|
[Server]
|
|
|
|
; Server name, default is what is returned by socket.gethostname()
|
|
name = GNS3_Server
|
|
|
|
; What protocol the server uses (http or https)
|
|
protocol = http
|
|
|
|
; IP where the server listen for connections
|
|
host = 0.0.0.0
|
|
; HTTP port for controlling the servers
|
|
port = 3080
|
|
|
|
; Secrets directory
|
|
secrets_dir = /home/gns3/.config/GNS3/secrets
|
|
|
|
; Options to enable SSL encryption
|
|
enable_ssl = False
|
|
certfile = /home/gns3/.config/GNS3/ssl/server.cert
|
|
certkey = /home/gns3/.config/GNS3/ssl/server.key
|
|
|
|
; Path where binary images are stored
|
|
images_path = /home/gns3/GNS3/images
|
|
|
|
; Additional paths to look for images
|
|
additional_images_paths = /opt/images;/mnt/disk1/images
|
|
|
|
; Path where user projects are stored
|
|
projects_path = /home/gns3/GNS3/projects
|
|
|
|
; Path where custom user appliances are stored
|
|
appliances_path = /home/gns3/GNS3/appliances
|
|
|
|
; Path where custom user symbols are stored
|
|
symbols_path = /home/gns3/GNS3/symbols
|
|
|
|
; Path where custom configs are stored
|
|
configs_path = /home/gns3/GNS3/configs
|
|
|
|
; Path where files like built-in appliances and Docker resources are stored
|
|
; The default path is the local user data directory
|
|
; (Linux: "~/.local/share/GNS3", macOS: "~/Library/Application Support/GNS3", Windows: "%APPDATA%\GNS3")
|
|
; resources_path = /home/gns3/GNS3/resources
|
|
|
|
; Default symbol theme
|
|
; Currently available themes are "Classic", Affinity-square-blue", "Affinity-square-red"
|
|
; "Affinity-square-gray", "Affinity-circle-blue", "Affinity-circle-red" and "Affinity-circle-gray"
|
|
default_symbol_theme = Affinity-square-blue
|
|
|
|
; Option to enable or disable raw images to be uploaded to the server
|
|
allow_raw_images = True
|
|
|
|
; Option to automatically discover images in the images directory
|
|
auto_discover_images = True
|
|
|
|
; Option to automatically send crash reports to the GNS3 team
|
|
report_errors = True
|
|
|
|
; First console port of the range allocated to devices
|
|
console_start_port_range = 5000
|
|
; Last console port of the range allocated to devices
|
|
console_end_port_range = 10000
|
|
|
|
; First VNC console port of the range allocated to devices.
|
|
; The value MUST BE >= 5900 and <= 65535
|
|
vnc_console_start_port_range = 5900
|
|
; Last VNC console port of the range allocated to devices
|
|
; The value MUST BE >= 5900 and <= 65535
|
|
vnc_console_end_port_range = 10000
|
|
|
|
; First port of the range allocated for inter-device communication. Two ports are allocated per link.
|
|
udp_start_port_range = 20000
|
|
; Last port of the range allocated for inter-device communication. Two ports are allocated per link
|
|
udp_end_port_range = 30000
|
|
|
|
; uBridge executable location, default: search in PATH
|
|
;ubridge_path = ubridge
|
|
|
|
; uBridge control channel transport: "unix" (-U socket_path; AF_UNIX +
|
|
; SO_PEERCRED, default — recommended on Linux for kernel-level peer
|
|
; authentication) or "tcp" (-H host:port; retained for backward compatibility,
|
|
; binds loopback).
|
|
;ubridge_control_transport = unix
|
|
|
|
; Marker (traffic-insight) UDP sink: one listener per compute process that
|
|
; receives uBridge MARK signals from every uBridge on this host.
|
|
; marker_listen_host defaults to 127.0.0.1 because uBridge runs locally.
|
|
; marker_listen_port defaults to 3070 (set to 0 for OS-chosen).
|
|
;marker_listen_host = 127.0.0.1
|
|
;marker_listen_port = 3070
|
|
|
|
; Option to enable or disable compute HTTP authentication
|
|
enable_http_auth = True
|
|
|
|
; Username for compute HTTP authentication, "gns3" is the default if not specified
|
|
compute_username = gns3
|
|
; Password for compute HTTP authentication, a randomly generated password is used if not specified
|
|
compute_password = gns3
|
|
|
|
; Only allow these interfaces to be used by GNS3, for the Cloud node for example (Linux/OSX only)
|
|
; Do not forget to allow virbr0 in order for the NAT node to work
|
|
allowed_interfaces = eth0,eth1,virbr0
|
|
|
|
; Specify the NAT interface to be used by the NAT node
|
|
; Default is virbr0 on Linux (requires libvirt) and vmnet8 for other platforms (requires VMware)
|
|
default_nat_interface = vmnet10
|
|
|
|
; Enable the built-in templates
|
|
enable_builtin_templates = True
|
|
|
|
; Install built-in appliances
|
|
install_builtin_appliances = True
|
|
|
|
; Git repository URL for GNS3 Copilot external skills
|
|
; This repository provides injection skills, prompts, and device skills
|
|
; skills_repo_url = https://github.com/yueguobin/GNS3-Skills.git
|
|
; Git branch for the skills repository
|
|
; skills_repo_branch = main
|
|
; Automatically pull updates from the skills repository when reloading
|
|
; skills_auto_update = false
|
|
|
|
; check if hardware virtualization is used by other emulators (KVM, VMware or VirtualBox)
|
|
hardware_virtualization_check = True
|
|
|
|
[VPCS]
|
|
; VPCS executable location, default: search in PATH
|
|
;vpcs_path = vpcs
|
|
|
|
[Dynamips]
|
|
; Enable auxiliary console ports on IOS routers
|
|
allocate_aux_console_ports = False
|
|
mmap_support = True
|
|
; Dynamips executable path, default: search in PATH
|
|
;dynamips_path = dynamips
|
|
sparse_memory_support = True
|
|
ghost_ios_support = True
|
|
|
|
[IOU]
|
|
; Path of your .iourc file. If not provided, the file is searched in $HOME/.iourc
|
|
iourc_path = /home/gns3/.iourc
|
|
; Validate if the iourc license file is correct. If you turn this off and your licence is invalid IOU will not start and no errors will be shown.
|
|
license_check = True
|
|
|
|
[VirtualBox]
|
|
; Path to the VBoxManage binary used to manage VirtualBox
|
|
vboxmanage_path = vboxmanage
|
|
|
|
[VMware]
|
|
; Path to vmrun binary used to manage VMware
|
|
vmrun_path = vmrun
|
|
; First vmnet interface of the range that can be managed by the GNS3 server
|
|
vmnet_start_range = 2
|
|
; Last vmnet interface of the range that can be managed by the GNS3 server. It must be maximum 19 on Windows.
|
|
vmnet_end_range = 255
|
|
; block network traffic originating from the host OS
|
|
block_host_traffic = False
|
|
|
|
[Qemu]
|
|
; Use Qemu monitor feature to communicate with Qemu VMs
|
|
enable_monitor = True
|
|
; IP used to listen for the monitor
|
|
monitor_host = 127.0.0.1
|
|
; !! Remember to add the gns3 user to the KVM group, otherwise you will not have read / write permissions to /dev/kvm !!
|
|
; Enable hardware acceleration (all platforms)
|
|
enable_hardware_acceleration = True
|
|
; Require hardware acceleration in order to start VMs
|
|
require_hardware_acceleration = False
|
|
; Allow unsafe additional command line options
|
|
allow_unsafe_options = False
|
|
; Path to the OVMF firmware directory
|
|
ovmf_firmware_dir = "/usr/share/OVMF"
|
|
|
|
[WebWireshark]
|
|
; Enable Web Wireshark feature (container-based Wireshark in browser)
|
|
enabled = True
|
|
; Docker image for Web Wireshark container
|
|
image = gns3/web-wireshark:latest
|
|
; Docker network subnet for Web Wireshark containers (default: 172.31.0.0/22)
|
|
; Change this if it conflicts with your existing network
|
|
network_subnet = 172.31.0.0/22
|
|
; Memory limit per container (e.g., "1g", "2g", "512m")
|
|
memory = 2g
|
|
; CPU cores per container (e.g., 1.0, 2.0)
|
|
cpus = 1.0
|
|
; Process limit per container
|
|
pids_limit = 1000
|
|
; MCP (Model Context Protocol) transport security settings
|
|
; Disabled by default — allows connections from any host (matches GNS3
|
|
; server's 0.0.0.0 binding). Enable and configure allowed hosts below
|
|
; for enhanced security against DNS rebinding attacks.
|
|
; Note: Only "host:*" port wildcards are supported (e.g., "127.0.0.1:*").
|
|
;mcp_enable_dns_rebinding_protection = true
|
|
;mcp_allowed_hosts = 127.0.0.1:*,localhost:*
|
|
;mcp_allowed_origins = http://127.0.0.1:*,http://localhost:*
|