Modifying Configuration Items
The haf-tool provides the config command to modify the configuration items of host nodes and offload nodes. The parameters in the command are described as follows.
Option |
Description |
|---|---|
-h, --help |
Outputs the haf-tool config help information. |
-l, --list |
Lists the configuration items and their values of haf-tool config on the current node. |
--set <key> <value> |
Changes the value of <key> to <value>. For details about keys that can be configured, see the output of --list. For details about the configuration items, see Table 2. |
Table 2 lists the configuration items that can be modified.
Node |
Option |
Description |
|---|---|---|
Host node |
host_tls_switch |
Whether to enable TLS identity authentication and data encryption/decryption on host nodes. The value of this parameter must be the same as that of target_tls_switch for offload nodes. Otherwise, the communication fails. 1: enable (default); 0: disable. |
communication_port |
Listening port of host nodes, which must be the same as that of offload nodes. |
|
Offload node |
target_tls_switch |
Whether to enable TLS identity authentication and data encryption/decryption on offload nodes. The value of this parameter must be the same as that of target_tls_switch for offload nodes. Otherwise, the communication fails. 1: enable (default); 0: disable. |
ip_white_list_switch |
Whether to enable the IP address trustlist on offload nodes. 1: enable (default); 0: disable. |
|
listen_ip |
Listening IP address of an offload node. |
|
communication_port |
Listening port of offload nodes, which must be the same as that of host nodes. |
|
ip_white_list |
IP address trustlist. The value can be an IP address or IP address segment. Use commas (,) to separate multiple values. Example: 127.0.0.1,10.10.0.2,10.10.10.0/24 NOTE:
The trustlist is encrypted. Therefore, --list does not display the value of ip_white_list. |