202 struct options  struct
217     /* list of options that should be ignored even if unknown */  argument
218     const char **ignore_unknown_option;
221     bool persist_config;
222     int persist_mode;
247     struct http_proxy_options *http_proxy_override;  argument
250     struct remote_host_store *rh_store;
252     bool remote_random;
253     const char *ipchange;
254     const char *dev;
255     const char *dev_type;
256     const char *dev_node;
257     const char *lladdr;
258     int topology; /* one of the TOP_x values from proto.h */
259     const char *ifconfig_local;
260     const char *ifconfig_remote_netmask;
261     const char *ifconfig_ipv6_local;
262     int ifconfig_ipv6_netbits;
263     const char *ifconfig_ipv6_remote;
264     bool ifconfig_noexec;
265     bool ifconfig_nowarn;
267     int shaper;
270     int proto_force;
272     bool mtu_test;
275     char *memstats_fn;
278     bool mlock;
280     int keepalive_ping;         /* a proxy for ping/ping-restart */
281     int keepalive_timeout;
283     int inactivity_timeout;     /* --inactive */
284     int64_t inactivity_minimum_bytes;
308     struct tuntap_options tuntap_options;  argument
311     const char *username;
312     const char *groupname;
313     const char *chroot_dir;
314     const char *cd_dir;
316     char *selinux_context;
318     const char *writepid;
319     const char *up_script;
320     const char *down_script;
321     bool user_script_used;
322     bool down_pre;
323     bool up_delay;
324     bool up_restart;
325     bool daemon;
327     int remap_sigusr1;
351     struct compress_options comp;  argument
355     int rcvbuf;
356     int sndbuf;
359     int mark;
383     /* Enable options consistency check between peers */  argument
384     bool occ;
387     const char *management_addr;
388     const char *management_port;
389     const char *management_user_pass;
390     int management_log_history_cache;
391     int management_echo_buffer_size;
392     int management_state_buffer_size;
393     const char *management_write_peer_info_file;
395     const char *management_client_user;
396     const char *management_client_group;
399     unsigned int management_flags;
400     const char *management_certificate;
404     struct plugin_option_list *plugin_list;
412     const char *tmp_dir;
413     bool server_defined;
414     in_addr_t server_network;
415     in_addr_t server_netmask;
416     bool server_ipv6_defined;                           /* IPv6 */
417     struct in6_addr server_network_ipv6;                /* IPv6 */
418     unsigned int server_netbits_ipv6;                   /* IPv6 */
423     unsigned int server_flags;
425     bool server_bridge_proxy_dhcp;
427     bool server_bridge_defined;
428     in_addr_t server_bridge_ip;
429     in_addr_t server_bridge_netmask;
430     in_addr_t server_bridge_pool_start;
431     in_addr_t server_bridge_pool_end;
433     struct push_list push_list;
434     bool ifconfig_pool_defined;
435     in_addr_t ifconfig_pool_start;
436     in_addr_t ifconfig_pool_end;
437     in_addr_t ifconfig_pool_netmask;
438     const char *ifconfig_pool_persist_filename;
439     int ifconfig_pool_persist_refresh_freq;
441     bool ifconfig_ipv6_pool_defined;                    /* IPv6 */
442     struct in6_addr ifconfig_ipv6_pool_base;            /* IPv6 */
443     int ifconfig_ipv6_pool_netbits;                     /* IPv6 */
445     int real_hash_size;
446     int virtual_hash_size;
447     const char *client_connect_script;
448     const char *client_disconnect_script;
449     const char *learn_address_script;
450     const char *client_config_dir;
451     bool ccd_exclusive;
452     bool disable;
453     int n_bcast_buf;
454     int tcp_queue_limit;
455     struct iroute *iroutes;
456     struct iroute_ipv6 *iroutes_ipv6;                   /* IPv6 */
457     bool push_ifconfig_defined;
458     in_addr_t push_ifconfig_local;
459     in_addr_t push_ifconfig_remote_netmask;
460     in_addr_t push_ifconfig_local_alias;
461     bool push_ifconfig_constraint_defined;
462     in_addr_t push_ifconfig_constraint_network;
463     in_addr_t push_ifconfig_constraint_netmask;
464     bool push_ifconfig_ipv4_blocked;                    /* IPv4 */
465     bool push_ifconfig_ipv6_defined;                    /* IPv6 */
466     struct in6_addr push_ifconfig_ipv6_local;           /* IPv6 */
467     int push_ifconfig_ipv6_netbits;                     /* IPv6 */
468     struct in6_addr push_ifconfig_ipv6_remote;          /* IPv6 */
469     bool push_ifconfig_ipv6_blocked;                    /* IPv6 */
470     bool enable_c2c;
471     bool duplicate_cn;
495     bool pull; /* client pull of config options from server */  argument
499     struct options_pre_pull *pre_pull;  argument
501     int scheduled_exit_interval;
504     struct static_challenge_info sc_info;
509     const char *shared_secret_file;
510     bool shared_secret_file_inline;
511     int key_direction;
512     const char *ciphername;
513     bool enable_ncp_fallback;      /**< If defined fall back to
515     bool ncp_enabled;
516     const char *ncp_ciphers;
517     const char *authname;
518     int keysize;
519     const char *prng_hash;
520     int prng_nonce_secret_len;
521     const char *engine;
522     bool replay;
523     bool mute_replay_warnings;
524     int replay_window;
525     int replay_time;
526     const char *packet_id_file;
527     bool test_crypto;
529     bool use_prediction_resistance;
533     bool tls_server;
534     bool tls_client;
535     const char *ca_file;
536     bool ca_file_inline;
537     const char *ca_path;
538     const char *dh_file;
539     bool dh_file_inline;
540     const char *cert_file;
541     bool cert_file_inline;
542     const char *extra_certs_file;
543     bool extra_certs_file_inline;
544     const char *priv_key_file;
545     bool priv_key_file_inline;
546     const char *pkcs12_file;
547     bool pkcs12_file_inline;
548     const char *cipher_list;
549     const char *cipher_list_tls13;
550     const char *tls_groups;
551     const char *tls_cert_profile;
552     const char *ecdh_curve;
553     const char *tls_verify;
554     int verify_x509_type;
555     const char *verify_x509_name;
556     const char *tls_export_cert;
557     const char *crl_file;
558     bool crl_file_inline;
560     int ns_cert_type; /* set to 0, NS_CERT_CHECK_SERVER, or NS_CERT_CHECK_CLIENT */
561     unsigned remote_cert_ku[MAX_PARMS];
562     const char *remote_cert_eku;
563     uint8_t *verify_hash;
564     hash_algo_type verify_hash_algo;
565     unsigned int ssl_flags; /* set to SSLF_x flags from ssl.h */
568     const char *pkcs11_providers[MAX_PARMS];
569     unsigned pkcs11_private_mode[MAX_PARMS];
570     bool pkcs11_protected_authentication[MAX_PARMS];
571     bool pkcs11_cert_private[MAX_PARMS];
572     int pkcs11_pin_cache_period;
573     const char *pkcs11_id;
574     bool pkcs11_id_management;
578     const char *cryptoapi_cert;
581     int tls_timeout;
584     int renegotiate_bytes;
585     int renegotiate_packets;
586     int renegotiate_seconds;
587     int renegotiate_seconds_min;
591     int handshake_window;
595     char *x509_username_field;
599     int transition_window;
602     const char *tls_auth_file;
603     bool tls_auth_file_inline;
606     const char *tls_crypt_file;
607     bool tls_crypt_file_inline;
611     const char *tls_crypt_v2_file;
612     bool tls_crypt_v2_file_inline;
614     const char *tls_crypt_v2_metadata;
616     const char *tls_crypt_v2_verify_script;
619     bool single_session;
621     bool push_peer_info;
623     bool tls_exit;
625     const struct x509_track *x509_track;
628     int foreign_option_index;
631     HANDLE msg_channel;
632     const char *exit_event_name;
633     bool exit_event_initial_state;
634     bool show_net_up;
635     int route_method;
636     bool block_outside_dns;
637     enum windows_driver_type windows_driver;
640     bool use_peer_id;
641     uint32_t peer_id;
645     const char *keying_material_exporter_label;
646     int keying_material_exporter_length;
649     bool vlan_tagging;
650     enum vlan_acceptable_frames vlan_accept;
651     uint16_t vlan_pvid;
653     struct pull_filter_list *pull_filter_list;
657     bool allow_recursive_routing;