From 9bbf27eb94877dea7229223de62d28f0d0206709 Mon Sep 17 00:00:00 2001
From: Anders Svensson
Date: Wed, 5 Jun 2013 13:56:04 +0200
Subject: Let diameter_{tcp,sctp} be configured with permissible remote
addresses
Option 'accept' allows remote addresses to be configured as tuples or
regular expressions. The remote addresses for any incoming (aka
accepted) connection/association are matched against the configured
values, any non-matching address causing the connection/association to
be aborted.
---
lib/diameter/doc/src/diameter_tcp.xml | 15 ++++++++++++++-
1 file changed, 14 insertions(+), 1 deletion(-)
(limited to 'lib/diameter/doc/src/diameter_tcp.xml')
diff --git a/lib/diameter/doc/src/diameter_tcp.xml b/lib/diameter/doc/src/diameter_tcp.xml
index 8e509aa829..ce4d6cfd0f 100644
--- a/lib/diameter/doc/src/diameter_tcp.xml
+++ b/lib/diameter/doc/src/diameter_tcp.xml
@@ -96,10 +96,12 @@ before configuring TLS capability on diameter transports.
Reason = term()
OwnOpt = {raddr, &ip_address;}
| {rport, integer()}
+ | {accept, Match}
| {port, integer()}
| {fragment_timer, infinity | 0..16#FFFFFFFF}
SslOpt = {ssl_options, true | list()}
TcpOpt = term()
+Match = &ip_address; | string() | [Match]
@@ -109,7 +111,18 @@ The start function required by &man_transport;.
Options raddr and rport specify the remote address
and port for a connecting transport and are not valid for a listening
-transport.
+transport.
+
+
+Option accept specifies remote addresses for a listening
+transport and is not valid for a connecting transport.
+If specified, a remote address that does not match one of the
+specified addresses causes the connection to be aborted.
+Multiple accept options can be specified.
+A string-valued Match that does not parse as an address is
+interpreted as a regular expression.
+
+
Option ssl_options must be specified for a transport
that should support TLS: a value of true results in a
TLS handshake immediately upon connection establishment while
--
cgit v1.2.3