-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathns.conf
718 lines (718 loc) · 53.4 KB
/
ns.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
#NS13.1 Build 37.29
# Last modified by `save config`, Fri Feb 3 14:33:41 2023
set ns config -IPAddress 10.102.57.183 -netmask 255.255.255.128
set ns weblogparam -bufferSizeMB 3
enable ns feature WL SP LB CS SSL GSLB AAA OSPF REWRITE AppFw RESPONDER AppFlow CH
enable ns mode FR L2 L3 Edge USNIP PMTUD ULFD
set system user nsroot 5eedf36339877ce962ba444554975ddc67543a4ee93e2c1f6b00dd162f0b7b76b65af4aa7b2e284571673a37999a45b6d15dabe3ab3f70671096b731e7284043d -encrypted -timeout 36000
set rsskeytype -rsstype ASYMMETRIC
set lacp -sysPriority 32768 -mac 2e:ef:44:4c:6e:a9
set interface 1/1 -haMonitor OFF -throughput 0 -bandwidthHigh 0 -bandwidthNormal 0 -intftype "Xen Virtual" -ifnum 1/1
set interface LO/1 -haMonitor OFF -haHeartbeat OFF -throughput 0 -bandwidthHigh 0 -bandwidthNormal 0 -intftype Loopback -ifnum LO/1
set ssl parameter -quantumSize 16384 -crlMemorySizeMB 512 -sslTriggerTimeout 150 -sendCloseNotify NO -encryptTriggerPktCount 35 -denySSLReneg NO -insertionEncoding UTF-8 -ocspCacheSize 15 -pushFlag 1 -dropReqWithNoHostHeader YES -SNIHTTPHostMatch STRICT -pushEncTriggerTimeout 2 -undefActionControl DROP -undefActionData DROP -sigDigestType ECDSA-SHA1 -ssliErrorCache ENABLED -ssliMaxErrorCacheMem 10 -insertCertSpace NO -ndcppComplianceCertCheck YES -operationQueueLimit 200
add ns ip6 fe80::2cef:44ff:fe4c:6ea9/64 -scope link-local -type NSIP -vlan 1 -vServer DISABLED -mgmtAccess ENABLED -dynamicRouting ENABLED
add ns ip 10.102.57.186 255.255.255.128 -vServer DISABLED
set nd6RAvariables -vlan 1
set snmp alarm APPFW-GRPC -time 0
set snmp alarm APPFW-GRPC-WEB-JSON -time 0
set snmp alarm APPFW-GRPC-WEB-TEXT -time 0
set snmp alarm CLUSTER-BACKPLANE-HB-MISSING -time 86400
set snmp alarm CLUSTER-NODE-HEALTH -time 86400
set snmp alarm CLUSTER-NODE-QUORUM -time 86400
set snmp alarm CLUSTER-VERSION-MISMATCH -time 86400
set snmp alarm COMPACT-FLASH-ERRORS -time 86400
set snmp alarm HA-BAD-SECONDARY-STATE -time 86400
set snmp alarm HA-NO-HEARTBEATS -time 86400
set snmp alarm HA-SYNC-FAILURE -time 86400
set snmp alarm HA-VERSION-MISMATCH -time 86400
set snmp alarm HARD-DISK-DRIVE-ERRORS -time 86400
set snmp alarm PORT-ALLOC-EXCEED -time 3600
set snmp alarm PORT-ALLOC-FAILED -time 3600
set snmp alarm SYSLOG-CONNECTION-DROPPED -time 0
bind policy patset ns_vpn_client_useragents AGEE -index 1 -charset ASCII
bind policy patset ns_vpn_client_useragents CitrixReceiver -index 2 -charset ASCII
bind policy patset ns_vpn_client_useragents AGMacClient -index 3 -charset ASCII
bind policy patset ns_vpn_client_useragents "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0" -index 4 -charset ASCII
bind policy patset ns_vpn_client_useragents "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:22.0) Gecko/20100101 Firefox/22.0" -index 5 -charset ASCII
bind policy patset ns_aaa_activesync_useragents Apple-iPhone -index 1 -charset ASCII
bind policy patset ns_aaa_activesync_useragents Apple-iPad -index 2 -charset ASCII
bind policy patset ns_aaa_activesync_useragents SAMSUNG-GT -index 3 -charset ASCII
bind policy patset ns_aaa_activesync_useragents "SAMSUNG GT" -index 4 -charset ASCII
bind policy patset ns_aaa_activesync_useragents AirWatch -index 5 -charset ASCII
bind policy patset ns_aaa_activesync_useragents "TouchDown(MSRPC)" -index 6 -charset ASCII
bind policy patset ns_aaa_relaystate_param_whitelist "citrixauthwebviewdone://" -index 1 -charset ASCII
bind policy patset ns_aaa_relaystate_param_whitelist "citrixsso://" -index 2 -charset ASCII
bind policy patset ns_aaa_relaystate_param_whitelist "citrixng://" -index 3 -charset ASCII
bind policy patset ns_videoopt_quic_abr_sni_whitelist googlevideo.com -index 1
bind policy patset ns_videoopt_quic_abr_sni_whitelist c.youtube.com -index 2
bind policy patset ns_videoopt_quic_abr_sni_blacklist manifest.googlevideo.com -index 1
bind policy patset ns_videoopt_quic_abr_sni_blacklist redirector.googlevideo.com -index 2
set ns encryptionParams -method AES256 -keyValue 957be63378c6229b479e172460883b6f193138092664592865b8ec1e9e30d7dbfd243571e6b8f3f398c849c35c3e431f8e906dfe755e1e5856af8ba6173582f3755a54b48654dcf7ae1e880bd766ae8e -encrypted -encryptmethod ENCMTHD_3 -kek -suffix 2021_11_12_16_00_41
set ssl profile ns_default_ssl_profile_frontend -eRSA ENABLED -sessReuse ENABLED -dropReqWithNoHostHeader YES
set ssl profile ns_default_ssl_profile_backend -sessReuse ENABLED -strictCAChecks YES -SNIHTTPHostMatch STRICT
add ssl profile legacy_1 -dhCount 1000 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -cipherURL "http://abc.com" -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -HSTS ENABLED -maxage 200000 -IncludeSubdomains YES -preload YES -zeroRttEarlyData ENABLED -tls13SessionTicketsPerAuthContext 10 -dheKeyExchangeWithPsk YES
add ssl profile legacy_2 -sessReuse ENABLED -sessTimeout 120
add ssl profile legacy1_svc -sslProfileType BackEnd -eRSA DISABLED -sessReuse ENABLED -sessTimeout 100 -tls1 DISABLED -tls11 DISABLED -SNIEnable ENABLED -serverAuth ENABLED -commonName abc.com -sendCloseNotify NO
add ssl profile legacy2_svc -sslProfileType BackEnd -eRSA DISABLED -sessReuse ENABLED -sessTimeout 300
add ssl profile legacy1_sg -sslProfileType BackEnd -eRSA DISABLED -sessReuse ENABLED -sessTimeout 100 -tls1 DISABLED -tls11 DISABLED -SNIEnable ENABLED -serverAuth ENABLED -commonName abc.com -sendCloseNotify NO
add ssl profile legacy2_sg -sslProfileType BackEnd -eRSA DISABLED -sessReuse ENABLED -sessTimeout 300 -strictCAChecks YES
add ssl profile legacy_intsvc -sessReuse DISABLED -tls1 DISABLED -tls11 DISABLED -sendCloseNotify NO
add ssl profile profile1 -sessReuse ENABLED -sessTimeout 120
add ssl profile legacy1_transparent -dhCount 1000 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO
add ssl profile legacy2_transparent -sessReuse ENABLED -sessTimeout 120
add ssl profile legacy_gt -dhCount 1000 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -HSTS ENABLED -maxage 200000 -IncludeSubdomains YES -preload YES -zeroRttEarlyData ENABLED -tls13SessionTicketsPerAuthContext 10 -dheKeyExchangeWithPsk YES
add server 10.102.57.131 10.102.57.131
add server 2.2.2.2 2.2.2.2
add server 2.2.2.3 2.2.2.3
add server 2.2.2.4 2.2.2.4
add server 2.2.2.5 2.2.2.5
add server 2.2.2.6 2.2.2.6
add server 2.2.2.7 2.2.2.7
add server 2.2.2.8 2.2.2.8
add server 2.2.2.9 2.2.2.9
add server 2.2.2.10 2.2.2.10
add server 10.102.57.65 10.102.57.65
add server 10.102.57.66 10.102.57.66
add server 10.102.57.67 10.102.57.67
add server 10.102.57.68 10.102.57.68
add server 10.102.57.90 10.102.57.90
add server 10.102.57.91 10.102.57.91
add server 10.102.57.92 10.102.57.92
add server 10.102.57.93 10.102.57.93
add server 10.102.57.94 10.102.57.94
add server 10.102.57.95 10.102.57.95
add server 10.102.57.96 10.102.57.96
add server 10.102.57.97 10.102.57.97
add server 10.102.57.98 10.102.57.98
add server 10.102.57.99 10.102.57.99
add server 10.102.57.100 10.102.57.100
add server 10.102.57.101 10.102.57.101
add server 10.102.57.102 10.102.57.102
add server 10.102.57.103 10.102.57.103
add service svc1 10.102.57.131 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc2 2.2.2.2 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc3 2.2.2.3 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc4 2.2.2.4 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc5 2.2.2.5 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc6 2.2.2.6 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc7 2.2.2.7 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc8 2.2.2.8 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc9 2.2.2.9 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc10 2.2.2.10 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc11 10.102.57.65 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc12 10.102.57.66 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc13 10.102.57.67 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service svc14 10.102.57.68 SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc1 10.102.57.90 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc2 10.102.57.91 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc3 10.102.57.92 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc4 10.102.57.93 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc5 10.102.57.94 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc6 10.102.57.95 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc7 10.102.57.96 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc8 10.102.57.97 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc9 10.102.57.98 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc10 10.102.57.99 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc11 10.102.57.100 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc12 10.102.57.101 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc13 10.102.57.102 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add service trans_svc14 10.102.57.103 SSL 443 -clearTextPort 80 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
set service nshttpd-gui-127.0.0.1-80 -cip ENABLED
set service nshttpd-vpn-127.0.0.1-81 -cip ENABLED
add serviceGroup sg2 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg3 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg4 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg5 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg6 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg7 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg8 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg9 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg10 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg1 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg11 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg12 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg13 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add serviceGroup sg14 SSL -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add ssl certKey ns-server-certificate -cert ns-server.cert -key ns-server.key
add ssl certKey mycertkey -cert "complete/server/server_rsa_2048.pem" -key "complete/server/server_rsa_2048.ky"
add ssl certKey test-kn -cert "chinesecerts/cacert.pem" -expiryMonitor DISABLED
set lb parameter -sessionsThreshold 300000
add lb vserver v1 SSL 1.1.1.1 443 -persistenceType NONE -cltTimeout 180
add lb vserver v2 SSL 1.1.1.2 443 -persistenceType NONE -cltTimeout 180
add lb vserver v3 SSL 1.1.1.3 443 -persistenceType NONE -cltTimeout 180
add lb vserver v4 SSL 1.1.1.4 443 -persistenceType NONE -cltTimeout 180
add lb vserver v5 SSL 1.1.1.5 443 -persistenceType NONE -cltTimeout 180
add lb vserver v6 SSL 1.1.1.6 443 -persistenceType NONE -cltTimeout 180
add lb vserver v7 SSL 1.1.1.7 443 -persistenceType NONE -cltTimeout 180
add lb vserver v8 SSL 1.1.1.8 443 -persistenceType NONE -cltTimeout 180
add lb vserver v9 SSL 1.1.1.9 443 -persistenceType NONE -cltTimeout 180
add lb vserver v10 SSL 1.1.1.10 443 -persistenceType NONE -cltTimeout 180
add lb vserver v_dummy SSL 1.1.22.33 443 -persistenceType NONE -cltTimeout 180
add lb vserver v11 SSL 1.1.1.11 443 -persistenceType NONE -cltTimeout 180
add lb vserver v12 SSL 1.1.1.12 443 -persistenceType NONE -cltTimeout 180
add lb vserver v13 SSL 1.1.1.13 443 -persistenceType NONE -cltTimeout 180
add lb vserver v14 SSL 1.1.1.14 443 -persistenceType NONE -cltTimeout 180
add lb vserver v_gt1 SSL * 443 -persistenceType NONE -cltTimeout 180
add lb vserver v-gt2 SSL * 444 -persistenceType NONE -cltTimeout 180
add lb vserver v-gt3 SSL * 445 -persistenceType NONE -cltTimeout 180
set cache parameter -via "NS-CACHE-10.0: 183"
set aaa parameter -maxAAAUsers 4294967295
set ns rpcNode 10.102.57.183 -password cabb691076d9997f3c98ea7eb129fefc21b128819393f9ba20fa2518c82a3c8d7040332da0607fda6bb8394df4d4008c -encrypted -encryptmethod ENCMTHD_3 -kek -suffix 2021_11_12_16_00_41 -srcIP 10.102.57.183
bind rewrite policylabel ns_cvpn_v2_url_label ns_cvpn_v2_bypass_url_pol 20000 NEXT
bind cmp global ns_adv_nocmp_xml_ie -priority 8700 -gotoPriorityExpression END -type RES_DEFAULT
bind cmp global ns_adv_nocmp_mozilla_47 -priority 8800 -gotoPriorityExpression END -type RES_DEFAULT
bind cmp global ns_adv_cmp_mscss -priority 8900 -gotoPriorityExpression END -type RES_DEFAULT
bind cmp global ns_adv_cmp_msapp -priority 9000 -gotoPriorityExpression END -type RES_DEFAULT
bind cmp global ns_adv_cmp_content_type -priority 10000 -gotoPriorityExpression END -type RES_DEFAULT
bind cmp global ns_adv_nocmp_xml_ie -priority 8700 -gotoPriorityExpression END -type HTTPQUIC_RES_DEFAULT
bind cmp global ns_adv_nocmp_mozilla_47 -priority 8800 -gotoPriorityExpression END -type HTTPQUIC_RES_DEFAULT
bind cmp global ns_adv_cmp_mscss -priority 8900 -gotoPriorityExpression END -type HTTPQUIC_RES_DEFAULT
bind cmp global ns_adv_cmp_msapp -priority 9000 -gotoPriorityExpression END -type HTTPQUIC_RES_DEFAULT
bind cmp global ns_adv_cmp_content_type -priority 10000 -gotoPriorityExpression END -type HTTPQUIC_RES_DEFAULT
set appflow param -observationPointId 3073992202
add cache contentGroup DEFAULT
add cache contentGroup BASEFILE -relExpiry 86000 -weakNegRelExpiry 600 -maxResSize 256 -memLimit 2
add cache contentGroup DELTAJS -relExpiry 86000 -weakNegRelExpiry 600 -insertAge NO -maxResSize 256 -memLimit 1 -pinned YES
add cache contentGroup ctx_cg_poc -relExpiry 86000 -weakNegRelExpiry 600 -insertAge NO -maxResSize 500 -memLimit 256 -pinned YES
set cache contentGroup NSFEO -maxResSize 1994752
add cache policy _nonGetReq -rule "!HTTP.REQ.METHOD.eq(GET)" -action NOCACHE
add cache policy _advancedConditionalReq -rule "HTTP.REQ.HEADER(\"If-Match\").EXISTS || HTTP.REQ.HEADER(\"If-Unmodified-Since\").EXISTS" -action NOCACHE
add cache policy _personalizedReq -rule "HTTP.REQ.HEADER(\"Cookie\").EXISTS || HTTP.REQ.HEADER(\"Authorization\").EXISTS || HTTP.REQ.HEADER(\"Proxy-Authorization\").EXISTS || HTTP.REQ.IS_NTLM_OR_NEGOTIATE" -action MAY_NOCACHE
add cache policy _uncacheableStatusRes -rule "! ((HTTP.RES.STATUS.EQ(200)) || (HTTP.RES.STATUS.EQ(304)) || (HTTP.RES.STATUS.BETWEEN(400,499)) || (HTTP.RES.STATUS.BETWEEN(300, 302)) || (HTTP.RES.STATUS.EQ(307))|| (HTTP.RES.STATUS.EQ(203)))" -action NOCACHE
add cache policy _uncacheableCacheControlRes -rule "((HTTP.RES.CACHE_CONTROL.IS_PRIVATE) || (HTTP.RES.CACHE_CONTROL.IS_NO_CACHE) || (HTTP.RES.CACHE_CONTROL.IS_NO_STORE) || (HTTP.RES.CACHE_CONTROL.IS_INVALID))" -action NOCACHE
add cache policy _cacheableCacheControlRes -rule "((HTTP.RES.CACHE_CONTROL.IS_PUBLIC) || (HTTP.RES.CACHE_CONTROL.IS_MAX_AGE) || (HTTP.RES.CACHE_CONTROL.IS_MUST_REVALIDATE) || (HTTP.RES.CACHE_CONTROL.IS_PROXY_REVALIDATE) || (HTTP.RES.CACHE_CONTROL.IS_S_MAXAGE))" -action CACHE -storeInGroup DEFAULT
add cache policy _uncacheableVaryRes -rule "((HTTP.RES.HEADER(\"Vary\").EXISTS) && ((HTTP.RES.HEADER(\"Vary\").INSTANCE(1).LENGTH > 0) || (!HTTP.RES.HEADER(\"Vary\").STRIP_END_WS.SET_TEXT_MODE(IGNORECASE).eq(\"Accept-Encoding\"))))" -action NOCACHE
add cache policy _uncacheablePragmaRes -rule "HTTP.RES.HEADER(\"Pragma\").EXISTS" -action NOCACHE
add cache policy _cacheableExpiryRes -rule "HTTP.RES.HEADER(\"Expires\").EXISTS" -action CACHE -storeInGroup DEFAULT
add cache policy _imageRes -rule "HTTP.RES.HEADER(\"Content-Type\").SET_TEXT_MODE(IGNORECASE).STARTSWITH(\"image/\")" -action CACHE -storeInGroup DEFAULT
add cache policy _personalizedRes -rule "HTTP.RES.HEADER(\"Set-Cookie\").EXISTS || HTTP.RES.HEADER(\"Set-Cookie2\").EXISTS" -action NOCACHE
add cache policy ctx_images -rule "HTTP.REQ.URL.SET_TEXT_MODE(IGNORECASE).CONTAINS_INDEX(\"ctx_file_extensions\").BETWEEN(101,150)" -action CACHE -storeInGroup ctx_cg_poc
add cache policy ctx_web_css -rule "HTTP.REQ.URL.ENDSWITH(\".css\")" -action CACHE -storeInGroup ctx_cg_poc
add cache policy ctx_doc_pdf -rule "HTTP.REQ.URL.ENDSWITH(\".pdf\")" -action CACHE -storeInGroup ctx_cg_poc
add cache policy ctx_web_JavaScript -rule "HTTP.REQ.URL.ENDSWITH(\".js\")" -action CACHE -storeInGroup ctx_cg_poc
add cache policy ctx_web_JavaScript-Res -rule "HTTP.RES.HEADER(\"Content-Type\").CONTAINS(\"application/x-javascript\")" -action CACHE -storeInGroup ctx_cg_poc
add cache policy ctx_NOCACHE_Cleanup -rule TRUE -action NOCACHE
add cache policylabel _reqBuiltinDefaults -evaluates REQ
add cache policylabel _resBuiltinDefaults -evaluates RES
add cache policylabel _httpquicReqBuiltinDefaults -evaluates HTTPQUIC_REQ
add cache policylabel _httpquicResBuiltinDefaults -evaluates HTTPQUIC_RES
bind cache policylabel _reqBuiltinDefaults -policyName _nonGetReq -priority 100 -gotoPriorityExpression END
bind cache policylabel _reqBuiltinDefaults -policyName _advancedConditionalReq -priority 200 -gotoPriorityExpression END
bind cache policylabel _reqBuiltinDefaults -policyName _personalizedReq -priority 300 -gotoPriorityExpression END
bind cache policylabel _resBuiltinDefaults -policyName _uncacheableStatusRes -priority 100 -gotoPriorityExpression END
bind cache policylabel _resBuiltinDefaults -policyName _uncacheableVaryRes -priority 200 -gotoPriorityExpression END
bind cache policylabel _resBuiltinDefaults -policyName _uncacheableCacheControlRes -priority 300 -gotoPriorityExpression END
bind cache policylabel _resBuiltinDefaults -policyName _cacheableCacheControlRes -priority 400 -gotoPriorityExpression END
bind cache policylabel _resBuiltinDefaults -policyName _uncacheablePragmaRes -priority 500 -gotoPriorityExpression END
bind cache policylabel _resBuiltinDefaults -policyName _cacheableExpiryRes -priority 600 -gotoPriorityExpression END
bind cache policylabel _resBuiltinDefaults -policyName _imageRes -priority 700 -gotoPriorityExpression END
bind cache policylabel _resBuiltinDefaults -policyName _personalizedRes -priority 800 -gotoPriorityExpression END
bind cache policylabel _httpquicReqBuiltinDefaults -policyName _nonGetReq -priority 100 -gotoPriorityExpression END
bind cache policylabel _httpquicReqBuiltinDefaults -policyName _advancedConditionalReq -priority 200 -gotoPriorityExpression END
bind cache policylabel _httpquicReqBuiltinDefaults -policyName _personalizedReq -priority 300 -gotoPriorityExpression END
bind cache policylabel _httpquicResBuiltinDefaults -policyName _uncacheableStatusRes -priority 100 -gotoPriorityExpression END
bind cache policylabel _httpquicResBuiltinDefaults -policyName _uncacheableVaryRes -priority 200 -gotoPriorityExpression END
bind cache policylabel _httpquicResBuiltinDefaults -policyName _uncacheableCacheControlRes -priority 300 -gotoPriorityExpression END
bind cache policylabel _httpquicResBuiltinDefaults -policyName _cacheableCacheControlRes -priority 400 -gotoPriorityExpression END
bind cache policylabel _httpquicResBuiltinDefaults -policyName _uncacheablePragmaRes -priority 500 -gotoPriorityExpression END
bind cache policylabel _httpquicResBuiltinDefaults -policyName _cacheableExpiryRes -priority 600 -gotoPriorityExpression END
bind cache policylabel _httpquicResBuiltinDefaults -policyName _imageRes -priority 700 -gotoPriorityExpression END
bind cache policylabel _httpquicResBuiltinDefaults -policyName _personalizedRes -priority 800 -gotoPriorityExpression END
bind cache global NOPOLICY -priority 185883 -gotoPriorityExpression USE_INVOCATION_RESULT -type REQ_DEFAULT -invoke policylabel _reqBuiltinDefaults
bind cache global NOPOLICY -priority 185883 -gotoPriorityExpression USE_INVOCATION_RESULT -type RES_DEFAULT -invoke policylabel _resBuiltinDefaults
bind cache global NOPOLICY -priority 185883 -gotoPriorityExpression USE_INVOCATION_RESULT -type HTTPQUIC_REQ_DEFAULT -invoke policylabel _httpquicReqBuiltinDefaults
bind cache global NOPOLICY -priority 185883 -gotoPriorityExpression USE_INVOCATION_RESULT -type HTTPQUIC_RES_DEFAULT -invoke policylabel _httpquicResBuiltinDefaults
set appfw profile APPFW_BYPASS -percentDecodeRecursively OFF
set appfw profile APPFW_BLOCK -percentDecodeRecursively OFF
bind lb vserver v1 svc1
bind lb vserver v2 svc1
bind lb vserver v3 svc1
bind lb vserver v4 svc1
bind lb vserver v5 svc1
bind lb vserver v6 svc1
bind lb vserver v7 svc1
bind lb vserver v8 svc1
bind lb vserver v9 svc1
bind lb vserver v10 svc1
add dns nsRec . a.root-servers.net -TTL 3600000
add dns nsRec . b.root-servers.net -TTL 3600000
add dns nsRec . c.root-servers.net -TTL 3600000
add dns nsRec . d.root-servers.net -TTL 3600000
add dns nsRec . e.root-servers.net -TTL 3600000
add dns nsRec . f.root-servers.net -TTL 3600000
add dns nsRec . g.root-servers.net -TTL 3600000
add dns nsRec . h.root-servers.net -TTL 3600000
add dns nsRec . i.root-servers.net -TTL 3600000
add dns nsRec . j.root-servers.net -TTL 3600000
add dns nsRec . k.root-servers.net -TTL 3600000
add dns nsRec . l.root-servers.net -TTL 3600000
add dns nsRec . m.root-servers.net -TTL 3600000
set ns diameter -identity netscaler.com -realm com
set subscriber gxInterface -pcrfRealm pcrf.com -servicePathAVP 262099 -servicePathVendorid 3845
add dns addRec k.root-servers.net 193.0.14.129 -TTL 3600000
add dns addRec l.root-servers.net 199.7.83.42 -TTL 3600000
add dns addRec a.root-servers.net 198.41.0.4 -TTL 3600000
add dns addRec b.root-servers.net 192.228.79.201 -TTL 3600000
add dns addRec c.root-servers.net 192.33.4.12 -TTL 3600000
add dns addRec d.root-servers.net 199.7.91.13 -TTL 3600000
add dns addRec m.root-servers.net 202.12.27.33 -TTL 3600000
add dns addRec i.root-servers.net 192.36.148.17 -TTL 3600000
add dns addRec j.root-servers.net 192.58.128.30 -TTL 3600000
add dns addRec g.root-servers.net 192.112.36.4 -TTL 3600000
add dns addRec h.root-servers.net 198.97.190.53 -TTL 3600000
add dns addRec e.root-servers.net 192.203.230.10 -TTL 3600000
add dns addRec f.root-servers.net 192.5.5.241 -TTL 3600000
set lb monitor http2direct HTTP2 -deviation 0 -interval 5 -resptimeout 2 -downTime 30 -grpcStatusCode 12
set lb monitor http2ssl HTTP2 -deviation 0 -interval 5 -resptimeout 2 -downTime 30 -grpcStatusCode 12
set lb monitor ldns-dns LDNS-DNS -query . -queryType Address -deviation 0 -interval 6 -resptimeout 3 -downTime 20
set lb monitor stasecure CITRIX-STA-SERVICE -deviation 0 -interval 2 MIN -resptimeout 4 -downTime 5
set lb monitor sta CITRIX-STA-SERVICE -deviation 0 -interval 2 MIN -resptimeout 4 -downTime 5
set gslb parameter -incarnation 278
add route 0.0.0.0 0.0.0.0 10.102.57.129
set ssl service trans_svc14 -sslProfile legacy2_transparent
set ssl service trans_svc13 -sslProfile legacy2_transparent
set ssl service trans_svc12 -sslProfile legacy1_transparent
set ssl service trans_svc11 -sslProfile legacy1_transparent
set ssl service trans_svc10 -eRSA ENABLED -sessReuse ENABLED -sessTimeout 120 -dtls1 DISABLED -sendCloseNotify NO
set ssl service trans_svc9 -eRSA ENABLED -sessReuse ENABLED -sessTimeout 120 -dtls1 DISABLED -sendCloseNotify NO
set ssl service trans_svc8 -eRSA ENABLED -sessReuse ENABLED -sessTimeout 120 -dtls1 DISABLED -sendCloseNotify NO
set ssl service trans_svc7 -eRSA ENABLED -sessReuse ENABLED -sessTimeout 120 -dtls1 DISABLED -sendCloseNotify NO
set ssl service trans_svc6 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -dhCount 1000 -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -dtls1 DISABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl service trans_svc5 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -dhCount 1000 -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -dtls1 DISABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl service trans_svc4 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -dhCount 1000 -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -dtls1 DISABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl service trans_svc3 -eRSA ENABLED -sessReuse ENABLED -sessTimeout 120 -dtls1 DISABLED -sendCloseNotify NO
set ssl service trans_svc2 -eRSA ENABLED -sessReuse ENABLED -sessTimeout 120 -dtls1 DISABLED -sendCloseNotify NO
set ssl service trans_svc1 -eRSA ENABLED -sessReuse ENABLED -sessTimeout 120 -dtls1 DISABLED -sendCloseNotify NO
set ssl service svc14 -sslProfile legacy2_svc
set ssl service svc13 -sslProfile legacy2_svc
set ssl service svc12 -sslProfile legacy1_svc
set ssl service svc11 -sslProfile legacy1_svc
set ssl service svc10 -dtls1 DISABLED -sendCloseNotify NO
set ssl service svc9 -sessReuse DISABLED -tls12 DISABLED -dtls1 DISABLED -sendCloseNotify NO
set ssl service svc8 -sessReuse DISABLED -tls12 DISABLED -dtls1 DISABLED -sendCloseNotify NO
set ssl service svc7 -sessReuse DISABLED -tls12 DISABLED -dtls1 DISABLED -sendCloseNotify NO
set ssl service svc6 -sessReuse ENABLED -sessTimeout 100 -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -dtls1 DISABLED -SNIEnable ENABLED -serverAuth ENABLED -commonName abc.com -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl service svc5 -sessReuse ENABLED -sessTimeout 100 -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -dtls1 DISABLED -SNIEnable ENABLED -serverAuth ENABLED -commonName abc.com -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl service svc4 -sessReuse ENABLED -sessTimeout 100 -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -dtls1 DISABLED -SNIEnable ENABLED -serverAuth ENABLED -commonName abc.com -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl service svc3 -dtls1 DISABLED -sendCloseNotify NO
set ssl service svc2 -dtls1 DISABLED -sendCloseNotify NO
set ssl service svc1 -eRSA ENABLED -dtls1 DISABLED -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl service nsrnatsip-127.0.0.1-5061 -eRSA ENABLED -sessReuse DISABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -dtls1 DISABLED
set ssl service nskrpcs-127.0.0.1-3009 -eRSA ENABLED -sessReuse DISABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -dtls1 DISABLED
set ssl service nshttps-::1l-443 -sslProfile legacy_intsvc
set ssl service nsrpcs-::1l-3008 -eRSA ENABLED -sessReuse DISABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -dtls1 DISABLED
set ssl service nshttps-127.0.0.1-443 -eRSA ENABLED -sessReuse DISABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -dtls1 DISABLED -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl service nsrpcs-127.0.0.1-3008 -eRSA ENABLED -sessReuse DISABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -dtls1 DISABLED -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl serviceGroup sg14 -sslProfile legacy2_sg
set ssl serviceGroup sg13 -sslProfile legacy2_sg
set ssl serviceGroup sg12 -sslProfile legacy1_sg
set ssl serviceGroup sg11 -sslProfile legacy1_sg
set ssl serviceGroup sg1 -sendCloseNotify NO
set ssl serviceGroup sg10 -serverAuth ENABLED -sendCloseNotify NO
set ssl serviceGroup sg9 -sessReuse DISABLED -tls12 DISABLED -sendCloseNotify NO
set ssl serviceGroup sg8 -sessReuse DISABLED -tls12 DISABLED -sendCloseNotify NO
set ssl serviceGroup sg7 -sessReuse DISABLED -tls12 DISABLED -sendCloseNotify NO
set ssl serviceGroup sg6 -sessReuse ENABLED -sessTimeout 100 -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -SNIEnable ENABLED -serverAuth ENABLED -commonName abc.com -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl serviceGroup sg5 -sessReuse ENABLED -sessTimeout 100 -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -SNIEnable ENABLED -serverAuth ENABLED -commonName abc.com -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl serviceGroup sg4 -sessReuse ENABLED -sessTimeout 100 -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -SNIEnable ENABLED -serverAuth ENABLED -commonName abc.com -sendCloseNotify NO -strictSigDigestCheck ENABLED
set ssl serviceGroup sg3 -sendCloseNotify NO
set ssl serviceGroup sg2 -sendCloseNotify NO
set ssl vserver v1 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -dhCount 1000 -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -cipherURL "http://abc.com" -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -dtls1 DISABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -HSTS ENABLED -maxage 200000 -IncludeSubdomains YES -preload YES -strictSigDigestCheck ENABLED -zeroRttEarlyData ENABLED -tls13SessionTicketsPerAuthContext 10 -dheKeyExchangeWithPsk YES
set ssl vserver v2 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -dhCount 1000 -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -dtls1 DISABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -HSTS ENABLED -maxage 200000 -IncludeSubdomains YES -preload YES -strictSigDigestCheck ENABLED -zeroRttEarlyData ENABLED -tls13SessionTicketsPerAuthContext 10 -dheKeyExchangeWithPsk YES
set ssl vserver v3 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -dhCount 1000 -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -dtls1 DISABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -HSTS ENABLED -maxage 200000 -IncludeSubdomains YES -preload YES -strictSigDigestCheck ENABLED -zeroRttEarlyData ENABLED -tls13SessionTicketsPerAuthContext 10 -dheKeyExchangeWithPsk YES
set ssl vserver v4 -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v5 -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v6 -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v7 -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v8 -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v9 -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v10 -sessReuse DISABLED -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v_dummy -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v11 -sslProfile legacy_1
set ssl vserver v12 -sslProfile legacy_1
set ssl vserver v13 -sslProfile legacy_2
set ssl vserver v14 -sslProfile legacy_2
set ssl vserver v_gt1 -clearTextPort 80 -dh ENABLED -dhFile "certs/dh/dh2048.pem" -dhCount 1000 -eRSA ENABLED -eRSACount 1000 -sessReuse ENABLED -sessTimeout 200 -cipherRedirect ENABLED -clientAuth ENABLED -clientCert Optional -sslRedirect ENABLED -ssl3 DISABLED -tls1 DISABLED -tls11 DISABLED -tls13 ENABLED -dtls1 DISABLED -SNIEnable ENABLED -ocspStapling ENABLED -pushEncTrigger Ignore -sendCloseNotify NO -HSTS ENABLED -maxage 200000 -IncludeSubdomains YES -preload YES -strictSigDigestCheck ENABLED -zeroRttEarlyData ENABLED -tls13SessionTicketsPerAuthContext 10 -dheKeyExchangeWithPsk YES
set ssl vserver v-gt2 -dtls1 DISABLED -sendCloseNotify NO
set ssl vserver v-gt3 -sslProfile legacy_gt
set vpn parameter -forceCleanup none -clientConfiguration all
bind audit syslogGlobal -policyName SETSYSLOGPARAMS_ADV_POL -priority 2000000000
bind audit nslogGlobal -policyName SETNSLOGPARAMS_ADV_POL -priority 2000000000
bind tunnel global ns_tunnel_nocmp
bind vpn global -policyName SETVPNPARAMS_ADV_POL -priority 65534 -gotoPriorityExpression NEXT
bind tm global -policyName SETTMSESSPARAMS_ADV_POL -priority 65534 -gotoPriorityExpression NEXT
add ssl cipher cg1
add ssl cipher cg2
bind ssl serviceGroup sg12 -cipherName DEFAULT_BACKEND
bind ssl serviceGroup sg12 -cipherName cg1
bind ssl serviceGroup sg12 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl serviceGroup sg12 -cipherName TLS1-ECDHE-RSA-AES128-SHA
bind ssl serviceGroup sg11 -cipherName DEFAULT_BACKEND
bind ssl serviceGroup sg11 -cipherName cg1
bind ssl serviceGroup sg11 -cipherName cg2
bind ssl serviceGroup sg9 -cipherName DEFAULT_BACKEND
bind ssl serviceGroup sg9 -cipherName cg1
bind ssl serviceGroup sg9 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl serviceGroup sg9 -cipherName TLS1-ECDHE-RSA-AES128-SHA
bind ssl serviceGroup sg8 -cipherName DEFAULT_BACKEND
bind ssl serviceGroup sg8 -cipherName cg1
bind ssl serviceGroup sg8 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl serviceGroup sg8 -cipherName TLS1-ECDHE-RSA-AES128-SHA
bind ssl serviceGroup sg7 -cipherName DEFAULT_BACKEND
bind ssl serviceGroup sg7 -cipherName cg1
bind ssl serviceGroup sg7 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl serviceGroup sg7 -cipherName TLS1-ECDHE-RSA-AES128-SHA
bind ssl serviceGroup sg6 -cipherName DEFAULT_BACKEND
bind ssl serviceGroup sg6 -cipherName cg1
bind ssl serviceGroup sg6 -cipherName cg2
bind ssl serviceGroup sg5 -cipherName DEFAULT_BACKEND
bind ssl serviceGroup sg5 -cipherName cg1
bind ssl serviceGroup sg5 -cipherName cg2
bind ssl serviceGroup sg4 -cipherName DEFAULT_BACKEND
bind ssl serviceGroup sg4 -cipherName cg1
bind ssl serviceGroup sg4 -cipherName cg2
bind ssl serviceGroup sg14 -eccCurveName P_256
bind ssl serviceGroup sg14 -eccCurveName P_384
bind ssl serviceGroup sg14 -eccCurveName P_224
bind ssl serviceGroup sg14 -eccCurveName P_521
bind ssl serviceGroup sg13 -eccCurveName P_256
bind ssl serviceGroup sg13 -eccCurveName P_384
bind ssl serviceGroup sg13 -eccCurveName P_224
bind ssl serviceGroup sg13 -eccCurveName P_521
bind ssl serviceGroup sg12 -eccCurveName P_256
bind ssl serviceGroup sg12 -eccCurveName P_384
bind ssl serviceGroup sg12 -eccCurveName P_224
bind ssl serviceGroup sg12 -eccCurveName P_521
bind ssl serviceGroup sg11 -eccCurveName P_256
bind ssl serviceGroup sg11 -eccCurveName P_384
bind ssl serviceGroup sg11 -eccCurveName P_224
bind ssl serviceGroup sg11 -eccCurveName P_521
bind ssl serviceGroup sg1 -eccCurveName P_256
bind ssl serviceGroup sg1 -eccCurveName P_384
bind ssl serviceGroup sg1 -eccCurveName P_224
bind ssl serviceGroup sg1 -eccCurveName P_521
bind ssl serviceGroup sg10 -eccCurveName P_256
bind ssl serviceGroup sg10 -eccCurveName P_384
bind ssl serviceGroup sg10 -eccCurveName P_224
bind ssl serviceGroup sg10 -eccCurveName P_521
bind ssl serviceGroup sg9 -eccCurveName P_256
bind ssl serviceGroup sg9 -eccCurveName P_384
bind ssl serviceGroup sg9 -eccCurveName P_224
bind ssl serviceGroup sg9 -eccCurveName P_521
bind ssl serviceGroup sg8 -eccCurveName P_256
bind ssl serviceGroup sg8 -eccCurveName P_384
bind ssl serviceGroup sg8 -eccCurveName P_224
bind ssl serviceGroup sg8 -eccCurveName P_521
bind ssl serviceGroup sg7 -eccCurveName P_256
bind ssl serviceGroup sg7 -eccCurveName P_384
bind ssl serviceGroup sg7 -eccCurveName P_224
bind ssl serviceGroup sg7 -eccCurveName P_521
bind ssl serviceGroup sg6 -eccCurveName P_256
bind ssl serviceGroup sg6 -eccCurveName P_384
bind ssl serviceGroup sg6 -eccCurveName P_224
bind ssl serviceGroup sg6 -eccCurveName P_521
bind ssl serviceGroup sg5 -eccCurveName P_256
bind ssl serviceGroup sg5 -eccCurveName P_384
bind ssl serviceGroup sg5 -eccCurveName P_224
bind ssl serviceGroup sg5 -eccCurveName P_521
bind ssl serviceGroup sg4 -eccCurveName P_256
bind ssl serviceGroup sg4 -eccCurveName P_384
bind ssl serviceGroup sg4 -eccCurveName P_224
bind ssl serviceGroup sg4 -eccCurveName P_521
bind ssl serviceGroup sg3 -eccCurveName P_256
bind ssl serviceGroup sg3 -eccCurveName P_384
bind ssl serviceGroup sg3 -eccCurveName P_224
bind ssl serviceGroup sg3 -eccCurveName P_521
bind ssl serviceGroup sg2 -eccCurveName P_256
bind ssl serviceGroup sg2 -eccCurveName P_384
bind ssl serviceGroup sg2 -eccCurveName P_224
bind ssl serviceGroup sg2 -eccCurveName P_521
bind ssl service trans_svc12 -cipherName cg1
bind ssl service trans_svc11 -cipherName DEFAULT
bind ssl service trans_svc11 -cipherName cg1
bind ssl service trans_svc11 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl service trans_svc8 -cipherName cg1
bind ssl service trans_svc7 -cipherName DEFAULT
bind ssl service trans_svc7 -cipherName cg1
bind ssl service trans_svc7 -cipherName cg2
bind ssl service svc12 -cipherName DEFAULT_BACKEND
bind ssl service svc12 -cipherName cg1
bind ssl service svc12 -cipherName TLS1-ECDHE-RSA-AES128-SHA
bind ssl service svc12 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl service svc11 -cipherName cg1
bind ssl service svc11 -cipherName cg2
bind ssl service svc9 -cipherName DEFAULT_BACKEND
bind ssl service svc9 -cipherName cg1
bind ssl service svc9 -cipherName TLS1-ECDHE-RSA-AES128-SHA
bind ssl service svc9 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl service svc8 -cipherName DEFAULT_BACKEND
bind ssl service svc8 -cipherName cg1
bind ssl service svc8 -cipherName TLS1-ECDHE-RSA-AES128-SHA
bind ssl service svc8 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl service svc7 -cipherName DEFAULT_BACKEND
bind ssl service svc7 -cipherName cg1
bind ssl service svc7 -cipherName TLS1-ECDHE-RSA-AES128-SHA
bind ssl service svc7 -cipherName TLS1.2-ECDHE-RSA-AES128-GCM-SHA256
bind ssl service svc6 -cipherName DEFAULT_BACKEND
bind ssl service svc6 -cipherName cg1
bind ssl service svc6 -cipherName cg2
bind ssl service svc5 -cipherName DEFAULT_BACKEND
bind ssl service svc5 -cipherName cg1
bind ssl service svc5 -cipherName cg2
bind ssl service svc4 -cipherName DEFAULT_BACKEND
bind ssl service svc4 -cipherName cg1
bind ssl service svc4 -cipherName cg2
bind ssl service nshttps-::1l-443 -cipherName cg1
bind ssl service nshttps-::1l-443 -cipherName cg2
bind ssl service nshttps-127.0.0.1-443 -cipherName DEFAULT
bind ssl service nshttps-127.0.0.1-443 -cipherName cg1
bind ssl service nshttps-127.0.0.1-443 -cipherName TLS1-ECDHE-RSA-AES256-SHA
bind ssl service nsrpcs-127.0.0.1-3008 -cipherName DEFAULT
bind ssl service nsrpcs-127.0.0.1-3008 -cipherName cg1
bind ssl service nsrpcs-127.0.0.1-3008 -cipherName TLS1-ECDHE-RSA-AES256-SHA
bind ssl service nsrnatsip-127.0.0.1-5061 -certkeyName ns-server-certificate
bind ssl service nskrpcs-127.0.0.1-3009 -certkeyName ns-server-certificate
bind ssl service nshttps-::1l-443 -certkeyName ns-server-certificate
bind ssl service nsrpcs-::1l-3008 -certkeyName ns-server-certificate
bind ssl service nshttps-127.0.0.1-443 -certkeyName ns-server-certificate
bind ssl service nsrpcs-127.0.0.1-3008 -certkeyName ns-server-certificate
bind ssl service trans_svc13 -eccCurveName P_256
bind ssl service trans_svc13 -eccCurveName P_384
bind ssl service trans_svc13 -eccCurveName P_224
bind ssl service trans_svc13 -eccCurveName P_521
bind ssl service trans_svc12 -eccCurveName P_256
bind ssl service trans_svc12 -eccCurveName P_384
bind ssl service trans_svc12 -eccCurveName P_224
bind ssl service trans_svc12 -eccCurveName P_521
bind ssl service trans_svc11 -eccCurveName P_256
bind ssl service trans_svc11 -eccCurveName P_384
bind ssl service trans_svc11 -eccCurveName P_224
bind ssl service trans_svc11 -eccCurveName P_521
bind ssl service trans_svc10 -eccCurveName P_256
bind ssl service trans_svc10 -eccCurveName P_384
bind ssl service trans_svc10 -eccCurveName P_224
bind ssl service trans_svc10 -eccCurveName P_521
bind ssl service trans_svc8 -eccCurveName P_256
bind ssl service trans_svc8 -eccCurveName P_384
bind ssl service trans_svc8 -eccCurveName P_521
bind ssl service trans_svc7 -eccCurveName P_256
bind ssl service trans_svc7 -eccCurveName P_384
bind ssl service trans_svc7 -eccCurveName P_224
bind ssl service trans_svc7 -eccCurveName P_521
bind ssl service trans_svc6 -eccCurveName P_256
bind ssl service trans_svc6 -eccCurveName P_384
bind ssl service trans_svc6 -eccCurveName P_224
bind ssl service trans_svc6 -eccCurveName P_521
bind ssl service trans_svc5 -eccCurveName P_256
bind ssl service trans_svc5 -eccCurveName P_384
bind ssl service trans_svc5 -eccCurveName P_224
bind ssl service trans_svc5 -eccCurveName P_521
bind ssl service trans_svc4 -eccCurveName P_256
bind ssl service trans_svc4 -eccCurveName P_384
bind ssl service trans_svc4 -eccCurveName P_224
bind ssl service trans_svc4 -eccCurveName P_521
bind ssl service trans_svc3 -eccCurveName P_256
bind ssl service trans_svc3 -eccCurveName P_384
bind ssl service trans_svc3 -eccCurveName P_224
bind ssl service trans_svc3 -eccCurveName P_521
bind ssl service trans_svc2 -eccCurveName P_256
bind ssl service trans_svc2 -eccCurveName P_384
bind ssl service trans_svc2 -eccCurveName P_224
bind ssl service trans_svc2 -eccCurveName P_521
bind ssl service trans_svc1 -eccCurveName P_256
bind ssl service trans_svc1 -eccCurveName P_384
bind ssl service trans_svc1 -eccCurveName P_224
bind ssl service trans_svc1 -eccCurveName P_521
bind ssl service svc14 -eccCurveName P_256
bind ssl service svc14 -eccCurveName P_384
bind ssl service svc14 -eccCurveName P_224
bind ssl service svc14 -eccCurveName P_521
bind ssl service svc13 -eccCurveName P_256
bind ssl service svc13 -eccCurveName P_384
bind ssl service svc13 -eccCurveName P_224
bind ssl service svc13 -eccCurveName P_521
bind ssl service svc12 -eccCurveName P_256
bind ssl service svc12 -eccCurveName P_384
bind ssl service svc12 -eccCurveName P_224
bind ssl service svc12 -eccCurveName P_521
bind ssl service svc11 -eccCurveName P_256
bind ssl service svc11 -eccCurveName P_384
bind ssl service svc11 -eccCurveName P_224
bind ssl service svc11 -eccCurveName P_521
bind ssl service svc10 -eccCurveName P_256
bind ssl service svc10 -eccCurveName P_384
bind ssl service svc10 -eccCurveName P_224
bind ssl service svc10 -eccCurveName P_521
bind ssl service svc9 -eccCurveName P_256
bind ssl service svc9 -eccCurveName P_384
bind ssl service svc9 -eccCurveName P_224
bind ssl service svc9 -eccCurveName P_521
bind ssl service svc8 -eccCurveName P_256
bind ssl service svc8 -eccCurveName P_384
bind ssl service svc8 -eccCurveName P_224
bind ssl service svc8 -eccCurveName P_521
bind ssl service svc7 -eccCurveName P_256
bind ssl service svc7 -eccCurveName P_384
bind ssl service svc7 -eccCurveName P_224
bind ssl service svc7 -eccCurveName P_521
bind ssl service svc6 -eccCurveName P_256
bind ssl service svc6 -eccCurveName P_384
bind ssl service svc6 -eccCurveName P_224
bind ssl service svc6 -eccCurveName P_521
bind ssl service svc5 -eccCurveName P_256
bind ssl service svc5 -eccCurveName P_384
bind ssl service svc5 -eccCurveName P_224
bind ssl service svc5 -eccCurveName P_521
bind ssl service svc4 -eccCurveName P_256
bind ssl service svc4 -eccCurveName P_384
bind ssl service svc4 -eccCurveName P_224
bind ssl service svc4 -eccCurveName P_521
bind ssl service svc3 -eccCurveName P_256
bind ssl service svc3 -eccCurveName P_384
bind ssl service svc3 -eccCurveName P_224
bind ssl service svc3 -eccCurveName P_521
bind ssl service svc2 -eccCurveName P_256
bind ssl service svc2 -eccCurveName P_384
bind ssl service svc2 -eccCurveName P_224
bind ssl service svc2 -eccCurveName P_521
bind ssl service svc1 -eccCurveName P_256
bind ssl service svc1 -eccCurveName P_384
bind ssl service svc1 -eccCurveName P_224
bind ssl service svc1 -eccCurveName P_521
bind ssl service nsrnatsip-127.0.0.1-5061 -eccCurveName P_256
bind ssl service nsrnatsip-127.0.0.1-5061 -eccCurveName P_384
bind ssl service nsrnatsip-127.0.0.1-5061 -eccCurveName P_224
bind ssl service nsrnatsip-127.0.0.1-5061 -eccCurveName P_521
bind ssl service nskrpcs-127.0.0.1-3009 -eccCurveName P_256
bind ssl service nskrpcs-127.0.0.1-3009 -eccCurveName P_384
bind ssl service nskrpcs-127.0.0.1-3009 -eccCurveName P_224
bind ssl service nskrpcs-127.0.0.1-3009 -eccCurveName P_521
bind ssl service nshttps-::1l-443 -eccCurveName P_256
bind ssl service nshttps-::1l-443 -eccCurveName P_384
bind ssl service nshttps-::1l-443 -eccCurveName P_224
bind ssl service nshttps-::1l-443 -eccCurveName P_521
bind ssl service nsrpcs-::1l-3008 -eccCurveName P_256
bind ssl service nsrpcs-::1l-3008 -eccCurveName P_384
bind ssl service nsrpcs-::1l-3008 -eccCurveName P_224
bind ssl service nsrpcs-::1l-3008 -eccCurveName P_521
bind ssl service nshttps-127.0.0.1-443 -eccCurveName P_256
bind ssl service nshttps-127.0.0.1-443 -eccCurveName P_384
bind ssl service nshttps-127.0.0.1-443 -eccCurveName P_224
bind ssl service nshttps-127.0.0.1-443 -eccCurveName P_521
bind ssl service nsrpcs-127.0.0.1-3008 -eccCurveName P_256
bind ssl service nsrpcs-127.0.0.1-3008 -eccCurveName P_384
bind ssl service nsrpcs-127.0.0.1-3008 -eccCurveName P_224
bind ssl service nsrpcs-127.0.0.1-3008 -eccCurveName P_521
bind ssl vserver v1 -cipherName DEFAULT
bind ssl vserver v1 -cipherName cg1
bind ssl vserver v1 -cipherName cg2
bind ssl vserver v2 -cipherName DEFAULT
bind ssl vserver v2 -cipherName cg1
bind ssl vserver v2 -cipherName cg2
bind ssl vserver v3 -cipherName DEFAULT
bind ssl vserver v3 -cipherName cg1
bind ssl vserver v3 -cipherName cg2
bind ssl vserver v11 -cipherName cg1
bind ssl vserver v11 -cipherName cg2
bind ssl vserver v12 -cipherName DEFAULT
bind ssl vserver v12 -cipherName cg1
bind ssl vserver v_gt1 -cipherName DEFAULT
bind ssl vserver v_gt1 -cipherName cg1
bind ssl vserver v_gt1 -cipherName cg2
bind ssl vserver v-gt3 -cipherName cg1
bind ssl vserver v1 -certkeyName mycertkey
bind ssl vserver v2 -certkeyName mycertkey
bind ssl vserver v3 -certkeyName mycertkey
bind ssl vserver v4 -certkeyName mycertkey
bind ssl vserver v5 -certkeyName mycertkey
bind ssl vserver v6 -certkeyName mycertkey
bind ssl vserver v7 -certkeyName mycertkey
bind ssl vserver v8 -certkeyName mycertkey
bind ssl vserver v9 -certkeyName mycertkey
bind ssl vserver v10 -certkeyName mycertkey
bind ssl vserver v1 -eccCurveName P_256
bind ssl vserver v1 -eccCurveName P_384
bind ssl vserver v1 -eccCurveName P_224
bind ssl vserver v1 -eccCurveName P_521
bind ssl vserver v2 -eccCurveName P_256
bind ssl vserver v2 -eccCurveName P_384
bind ssl vserver v2 -eccCurveName P_224
bind ssl vserver v2 -eccCurveName P_521
bind ssl vserver v3 -eccCurveName P_256
bind ssl vserver v3 -eccCurveName P_384
bind ssl vserver v3 -eccCurveName P_224
bind ssl vserver v3 -eccCurveName P_521
bind ssl vserver v4 -eccCurveName P_256
bind ssl vserver v4 -eccCurveName P_384
bind ssl vserver v4 -eccCurveName P_224
bind ssl vserver v4 -eccCurveName P_521
bind ssl vserver v5 -eccCurveName P_256
bind ssl vserver v5 -eccCurveName P_384
bind ssl vserver v5 -eccCurveName P_224
bind ssl vserver v5 -eccCurveName P_521
bind ssl vserver v6 -eccCurveName P_256
bind ssl vserver v6 -eccCurveName P_384
bind ssl vserver v6 -eccCurveName P_224
bind ssl vserver v6 -eccCurveName P_521
bind ssl vserver v7 -eccCurveName P_256
bind ssl vserver v7 -eccCurveName P_384
bind ssl vserver v7 -eccCurveName P_224
bind ssl vserver v7 -eccCurveName P_521
bind ssl vserver v8 -eccCurveName P_256
bind ssl vserver v8 -eccCurveName P_384
bind ssl vserver v8 -eccCurveName P_224
bind ssl vserver v8 -eccCurveName P_521
bind ssl vserver v9 -eccCurveName P_256
bind ssl vserver v9 -eccCurveName P_384
bind ssl vserver v9 -eccCurveName P_224
bind ssl vserver v9 -eccCurveName P_521
bind ssl vserver v10 -eccCurveName P_256
bind ssl vserver v10 -eccCurveName P_384
bind ssl vserver v10 -eccCurveName P_224
bind ssl vserver v10 -eccCurveName P_521
bind ssl vserver v_dummy -eccCurveName P_256
bind ssl vserver v_dummy -eccCurveName P_384
bind ssl vserver v_dummy -eccCurveName P_224
bind ssl vserver v_dummy -eccCurveName P_521
bind ssl vserver v11 -eccCurveName P_256
bind ssl vserver v11 -eccCurveName P_384
bind ssl vserver v11 -eccCurveName P_224
bind ssl vserver v12 -eccCurveName P_256
bind ssl vserver v12 -eccCurveName P_384
bind ssl vserver v12 -eccCurveName P_224
bind ssl vserver v12 -eccCurveName P_521
bind ssl vserver v13 -eccCurveName P_256
bind ssl vserver v13 -eccCurveName P_384
bind ssl vserver v13 -eccCurveName P_224
bind ssl vserver v13 -eccCurveName P_521
bind ssl vserver v14 -eccCurveName P_256
bind ssl vserver v14 -eccCurveName P_384
bind ssl vserver v14 -eccCurveName P_224
bind ssl vserver v14 -eccCurveName P_521
bind ssl vserver v_gt1 -eccCurveName P_256
bind ssl vserver v_gt1 -eccCurveName P_384
bind ssl vserver v_gt1 -eccCurveName P_224
bind ssl vserver v_gt1 -eccCurveName P_521
bind ssl vserver v-gt2 -eccCurveName P_256
bind ssl vserver v-gt2 -eccCurveName P_384
bind ssl vserver v-gt2 -eccCurveName P_224
bind ssl vserver v-gt2 -eccCurveName P_521
bind ssl vserver v-gt3 -eccCurveName P_224
add appfw JSONContentType "^application/json$" -isRegex REGEX
add appfw urlEncodedFormContentType "application/x-www-form-urlencoded"
add appfw urlEncodedFormContentType "application/x-www-form-urlencoded.*" -isRegex REGEX
add appfw multipartFormContentType "multipart/form-data"
add appfw multipartFormContentType "multipart/form-data.*" -isRegex REGEX
add appfw XMLContentType ".*/xml" -isRegex REGEX
add appfw XMLContentType ".*/.*\\+xml" -isRegex REGEX
add appfw XMLContentType ".*/xml-.*" -isRegex REGEX
add appfw gRPCContentType "^application/grpc$" -isRegex REGEX
add appfw gRPCContentType "^application/grpc-web$" -isRegex REGEX
add appfw gRPCContentType "^application/grpc-web+proto$" -isRegex REGEX
add appfw gRpcWebTextContentType "^application/grpc-web-text$" -isRegex REGEX
add appfw gRpcWebJSONContentType "^application/grpc-web+json$" -isRegex REGEX
set cloud parameter -InstanceID 0eed8dd9-d1c8-4c21-97d3-199bdc7fe578 -CustomerID x5rhririou65 -Deployment Production
set cloudtunnel parameter
set ip6TunnelParam -srcIP ::
set ptp -state ENABLE
set videooptimization parameter -RandomSamplingPercentage 0.00e+00