Ability needed to configure ephemeral port range

[plasm0r]

Hi

I need to be able to configure the ephemeral port range as per:

netsh int ipv4 set dynamicport tcp start=10000 num=1000

I've looked at the resources available for this module but can't see where I could do this. Am I missing something or would this be a new feature request?

Thanks!

[PlagueHO]

Hi @plasm0r - their currently isn't a resource that sets the ephemeral port range.

This is a gap and should be created as part of a new resource called TcpSetting and use the Set-NetTCPSetting and Get-NetTCPSetting functions.

It would be recommended that code in this resource follows the same pattern as the DSC_DnsClientGlobalSetting (e.g. a data driven settings resource) as this would then be very simple and quick to implement.

This resource should expose the following settings (snipped straight from the docs):

   [-MinRtoMs <UInt32[]>]
   [-InitialCongestionWindowMss <UInt32[]>]
   [-CongestionProvider <CongestionProvider[]>]
   [-CwndRestart <CwndRestart[]>]
   [-DelayedAckTimeoutMs <UInt32[]>]
   [-DelayedAckFrequency <Byte[]>]
   [-MemoryPressureProtection <MemoryPressureProtection[]>]
   [-AutoTuningLevelLocal <AutoTuningLevelLocal[]>]
   [-AutoTuningLevelGroupPolicy <AutoTuningLevelGroupPolicy[]>]
   [-AutoTuningLevelEffective <AutoTuningLevelEffective[]>]
   [-EcnCapability <EcnCapability[]>]
   [-Timestamps <Timestamps[]>]
   [-InitialRtoMs <UInt32[]>]
   [-ScalingHeuristics <ScalingHeuristics[]>]
   [-DynamicPortRangeStartPort <UInt16[]>]
   [-DynamicPortRangeNumberOfPorts <UInt16[]>]
   [-AutomaticUseCustom <AutomaticUseCustom[]>]
   [-NonSackRttResiliency <NonSackRttResiliency[]>]
   [-ForceWS <ForceWS[]>]
   [-MaxSynRetransmissions <Byte[]>]
   [-AutoReusePortRangeStartPort <UInt16[]>]
   [-AutoReusePortRangeNumberOfPorts <UInt16[]>]

Some settings could be omitted and we could start with just a subset to get the resource out quickly.

But due to the backlog of work I have at the moment it might take a while to get to. So recommend in the short term using the Script resource to do this.