{{ ansible_managed | comment}}

General {
	HashSize {{ conntrackd_hash_size }}
	HashLimit {{ conntrackd_hash_limit }}

	Syslog on

	LockFile /var/log/conntrackd.lock

	UNIX {
		Path /var/run/conntrackd.sock
	}

	SocketBufferSize {{ conntrackd_socket_buffer_size }}
	SocketBufferSizeMaxGrown {{ conntrackd_socket_buffer_size_max }}

	Systemd on

	Filter From Userspace {
		Protocol Accept {
			TCP
			UDP
		}
		Address Ignore {
{% for addr in conntrackd_ignore_addrs_ipv6 %}
			IPv6_address {{ addr }}
{% endfor %}
{% for addr in conntrackd_ignore_addrs_ipv4 %}
			IPv4_address {{ addr }}
{% endfor %}
		}
	}
}

Sync {
	Mode FTFW {
		DisableExternalCache off
		StartupResync on
		CommitTimeout {{ conntrackd_ftfw_commit_timeout }}
		PurgeTimeout {{ conntrackd_ftfw_purge_timeout }}
	}

	UDP {
		IPv6_address {{ conntrackd_udp_listen_ipv6 }}
		IPv4_Destination_Address {{ conntrackd_udp_dest_ipv6 }}
		Port {{ conntrackd_udp_listen_port }}
		Interface {{ conntrackd_udp_iface }}
		SndSocketBuffer {{ conntrackd_udp_send_buffer }}
		RcvSocketBuffer {{ conntrackd_udp_receive_buffer }}
		Checksum on
	}
}