| enable | boolean | Enable the package-owned connection tracking daemon. |
| hashLimit | signed integer | Maximum number of tracked connections in daemon caches. |
| hashSize | signed integer | Number of daemon cache hash buckets. |
| logConnections | boolean | Log destroyed connections in statistics mode. |
| mode | one of ["stats","sync"] | Run as a local statistics collector or an FTFW state replicator. |
| netlinkBufferSize | signed integer | Initial netlink receive buffer size in bytes. |
| netlinkBufferSizeMaxGrowth | signed integer | Maximum dynamically grown netlink buffer size in bytes. |
| pollSeconds | signed integer or null | Optional kernel conntrack polling interval. |
| sync.ackWindowSize | signed integer | FTFW acknowledgement window size. |
| sync.checksum | boolean | Verify checksums on state replication messages. |
| sync.interface | string matching [A-Za-z0-9][A-Za-z0-9_.:-]* | Dedicated replication network interface. |
| sync.localAddress | string matching [0-9]{1,3}(\.[0-9]{1,3}){3} | Local IPv4 address of the dedicated replication link. |
| sync.peerAddress | string matching [0-9]{1,3}(\.[0-9]{1,3}){3} | Peer IPv4 address receiving replicated state. |
| sync.port | TCP/UDP port number (1-65535) | UDP replication port. |
| sync.resendQueueSize | signed integer | Maximum FTFW resend queue length. |