The is used to classify incoming connections and route requests to workflows. ds-cfg-network-group top Specifies the set of criteria associated to this network group. A client connection can belong to a only if it matches all the criteria defined for this . cn=Criteria Specifies the set of resource limits enforced by this . All client connections belonging to a must comply with the resource limits policy. cn=ResourceLimits Specifies the request filtering policy enforced by this . All client connections belonging to a must comply with the request filtering policy. cn=RequestFilteringPolicy Indicates whether the is enabled for use in the server. If a network group is not enabled, its workflows will not be accessible when processing operations. ds-cfg-enabled Specifies the name that is used to identify the associated . The name must be unique among all the in the server. ds-cfg-network-group-id Specifies the order in which the network groups are evaluated. A client connection is first compared against network group with priority 1. If the client connection does not match the network group criteria, the client connection is compared against network group with priority 2 etc... ds-cfg-priority Identifies the workflows in the network group. The referenced workflows must be enabled. ds-cfg-workflow Defines the client connection affinity policy. A client connection affinity allows some requests to be routed to a specific data source regardless the regular routing process. For example, we can requires all the requests to be routed to a data source after a write has been complete on that data source. That way, a read request would return data that are consistent with a previous write request. By default, the client connection affinity is disabled. none Disables the client connection affinity. Routes the first read request to the data source to which a previous write request has been routed to. This affinity is useful when a client application performs a read request after a write request and the read request should return consistent data. Routes all the requests to the data source to which a previous write request has been routed to. Routes all the write requests to the data source to which a previous write request has been routed to. This affinity policy is useful for batch update where a parent entry and its subordinates must be sent to the same data source. Routes all the requests to the data source to which a previous request has been routed to. This affinity policy allows to create a kind of tunnel between a client application and a data source. ds-cfg-affinity-policy The period of time by which an affinity route remains active. The timeout value is a number of seconds and when the value is set to 0s (default value) then the route remains active forever. When the client connection affinity is enabled, an affinity route might be elected in accordance with the affinity policy. The affinity route is then used until the timeout value expires unless the timeout value is 0s in which case the route remains active forever. 0s ds-cfg-affinity-timeout