traffic-proxy
-------------

.. osdx:cfgcmd:: service traffic-proxy <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg id:
        Traffic proxy service


    :instances: Multiple

    :ref Required: 
    :ref Required: 
    :ref Required: 


.. osdx:cfgcmd:: service traffic-proxy <id> disable-ssl-compression

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Disable SSL/TLS compression on all connections

    This option is useful when the limiting factor is CPU, not network bandwidth






.. osdx:cfgcmd:: service traffic-proxy <id> hash-table-size <u32>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Size of hash-table to use for SSL flow tracking

    :arg u32:
        Number of elements (4096-65536)





.. osdx:cfgcmd:: service traffic-proxy <id> hash-table-timeout <u32>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Timeout of entries in hash-table

    :arg u32:
        Timeout in seconds (10-3600)





.. osdx:cfgcmd:: service traffic-proxy <id> local-vrf <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    VRF to run traffic proxy on



    :ref Reference: system vrf *



.. osdx:cfgcmd:: service traffic-proxy <id> logging

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Enable event logging






.. osdx:cfgcmd:: service traffic-proxy <id> logging connection

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Log information about new connections






.. osdx:cfgcmd:: service traffic-proxy <id> logging content

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Log information about decrypted content






.. osdx:cfgcmd:: service traffic-proxy <id> logging queue

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Show a log in the journal every time a new packet is enqueued






.. osdx:cfgcmd:: service traffic-proxy <id> mark <u32>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Mark diverted packets

    :arg u32:
        Integer value from 0 to 2147483647 (0-2147483647)





.. osdx:cfgcmd:: service traffic-proxy <id> mode <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Proxy operating mode

    :arg https:
        Decode HTTP connection, including the removal of HPKP, HSTS, Upgrade and Alternate Protocol
    :arg pop3s:
        Decode POP3 connection
    :arg smtps:
        Decode SMTP connection
    :arg ssl:
        Do not decode SSL connection, decrypted connection content is treated as opaque stream of bytes
    :arg http:
        Decode plain HTTP connection
    :arg pop3:
        Decode plain POP3 connection
    :arg smtp:
        Decode plain STMP connection
    :arg tcp:
        Do not decode TCP connection, decrypted connection content is treated as opaque stream of bytes
    :arg autossl:
        Do not decode SSL connection, work as protocol-independent STARTTLS support





.. osdx:cfgcmd:: service traffic-proxy <id> port <u32>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Local port to use to intercept traffic

    :arg u32:
        Numeric port (1-65535)





.. osdx:cfgcmd:: service traffic-proxy <id> queue <txt>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Traffic queue where decrypted/decoded packets will be sent



    :ref Reference: traffic queue *



.. osdx:cfgcmd:: service traffic-proxy <id> vrf-mark <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Mark diverted packets using a VRF



    :ref Reference: system vrf *



.. osdx:cfgcmd:: service traffic-proxy <id> x509

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    X.509 configuration parameters




    :ref Required: 
    :ref Required: 


.. osdx:cfgcmd:: service traffic-proxy <id> x509 ca-cert <file>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg file:
        CA certificate in PEM format to issue certificates forged on-the-fly





.. osdx:cfgcmd:: service traffic-proxy <id> x509 ca-key <file>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg file:
        CA private key in PEM format to issue certificates forged on-the-fly





.. osdx:cfgcmd:: service traffic-proxy <id> x509 dhparam <file>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg file:
        Diffie-Hellman parameters in PEM format





.. osdx:cfgcmd:: service traffic-proxy <id> x509 leaf-crl-url <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg id:
        URL to use as CRL distribution point

        CRL for all forged certificates





.. osdx:cfgcmd:: service traffic-proxy <id> x509 leaf-key-size <u32>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg u32:
        Keysize in bits for leaf key RSA