Brendan O'Dea [Fri, 5 Nov 2004 02:25:25 +0000 (02:25 +0000)]
add length checks and comments to proxy LCP parsing
Brendan O'Dea [Fri, 5 Nov 2004 02:21:55 +0000 (02:21 +0000)]
use constants
Brendan O'Dea [Thu, 4 Nov 2004 23:41:54 +0000 (23:41 +0000)]
values not set yet
Brendan O'Dea [Thu, 4 Nov 2004 23:33:13 +0000 (23:33 +0000)]
send snooped packets before adding the tun header
Brendan O'Dea [Thu, 4 Nov 2004 06:05:55 +0000 (06:05 +0000)]
byte counters are sent to the master frequently which resets the idle
counter, don't bother forwarding packets for this reason
Brendan O'Dea [Thu, 4 Nov 2004 05:08:36 +0000 (05:08 +0000)]
retain subdomain of hostname if any
Brendan O'Dea [Wed, 3 Nov 2004 13:29:31 +0000 (13:29 +0000)]
make log a conditional macro for _log
Brendan O'Dea [Wed, 3 Nov 2004 13:23:58 +0000 (13:23 +0000)]
make log a conditional macro for _log
Brendan O'Dea [Wed, 3 Nov 2004 13:22:39 +0000 (13:22 +0000)]
cleanup packet length handling
Brendan O'Dea [Wed, 3 Nov 2004 04:01:32 +0000 (04:01 +0000)]
clean test dir
Brendan O'Dea [Wed, 3 Nov 2004 03:13:02 +0000 (03:13 +0000)]
release 2.0.3
Brendan O'Dea [Tue, 2 Nov 2004 23:43:52 +0000 (23:43 +0000)]
release 2.0.3
Brendan O'Dea [Tue, 2 Nov 2004 06:45:36 +0000 (06:45 +0000)]
fix output format for TBFs
Brendan O'Dea [Tue, 2 Nov 2004 06:45:03 +0000 (06:45 +0000)]
fix cut-n-paste error
Brendan O'Dea [Tue, 2 Nov 2004 04:35:03 +0000 (04:35 +0000)]
- Use 2 seperate u16 values for throttle rate in/out
- Defer adding radius fds to the select loop until become_master
Brendan O'Dea [Sat, 30 Oct 2004 07:35:31 +0000 (07:35 +0000)]
merge
Brendan O'Dea [Sat, 30 Oct 2004 07:35:00 +0000 (07:35 +0000)]
slaves get new tbf indexes on becoming master anyway
Brendan O'Dea [Sat, 30 Oct 2004 07:17:41 +0000 (07:17 +0000)]
merge
Brendan O'Dea [Sat, 30 Oct 2004 06:58:55 +0000 (06:58 +0000)]
need to init_cli before loading config
Brendan O'Dea [Fri, 29 Oct 2004 05:34:27 +0000 (05:34 +0000)]
add throttle_buckets
Brendan O'Dea [Fri, 29 Oct 2004 04:34:39 +0000 (04:34 +0000)]
update
Brendan O'Dea [Fri, 29 Oct 2004 04:25:40 +0000 (04:25 +0000)]
sync changes
Brendan O'Dea [Fri, 29 Oct 2004 04:02:24 +0000 (04:02 +0000)]
clean up paths
Brendan O'Dea [Fri, 29 Oct 2004 04:01:53 +0000 (04:01 +0000)]
typo
Brendan O'Dea [Fri, 29 Oct 2004 04:01:11 +0000 (04:01 +0000)]
make number of throttle buckets configurable
Brendan O'Dea [Fri, 29 Oct 2004 04:00:36 +0000 (04:00 +0000)]
!OIE
Brendan O'Dea [Thu, 28 Oct 2004 03:58:51 +0000 (03:58 +0000)]
fix initdata proto
Brendan O'Dea [Thu, 28 Oct 2004 03:58:38 +0000 (03:58 +0000)]
unused
Brendan O'Dea [Thu, 28 Oct 2004 03:31:39 +0000 (03:31 +0000)]
hostname set via command line not config
Brendan O'Dea [Thu, 28 Oct 2004 03:31:11 +0000 (03:31 +0000)]
unfsck 4->8 indenting change
hostname set via command line not config
Brendan O'Dea [Thu, 28 Oct 2004 03:26:41 +0000 (03:26 +0000)]
shared_malloc returns NULL on failure
Brendan O'Dea [Mon, 25 Oct 2004 15:07:51 +0000 (15:07 +0000)]
fix command line args
David Parrish [Tue, 5 Oct 2004 02:50:03 +0000 (02:50 +0000)]
Don't continue creating session if no IP addresses are free
David Parrish [Mon, 4 Oct 2004 23:34:54 +0000 (23:34 +0000)]
Fix version 2.0.2
David Parrish [Mon, 4 Oct 2004 23:34:07 +0000 (23:34 +0000)]
Make it compile
David Parrish [Thu, 23 Sep 2004 04:01:36 +0000 (04:01 +0000)]
- Renegotiate MRU - Yuri
- Take LCP ConfigReq length from the packet length field - Yuri
David Parrish [Thu, 23 Sep 2004 03:59:09 +0000 (03:59 +0000)]
Don't write accounting files if not required.
Fix checking for mmap success
David Parrish [Tue, 21 Sep 2004 05:09:09 +0000 (05:09 +0000)]
Add mac address config option handling
David Parrish [Tue, 21 Sep 2004 04:30:46 +0000 (04:30 +0000)]
foo
David Parrish [Tue, 21 Sep 2004 00:50:31 +0000 (00:50 +0000)]
l2tpns-dont-timeshift-unidirectional-traffic.patch
David Parrish [Mon, 20 Sep 2004 23:34:35 +0000 (23:34 +0000)]
l2tpns-dont-timeshift-unidirectional-traffic.patch
David Parrish [Sun, 19 Sep 2004 23:26:46 +0000 (23:26 +0000)]
Add configurable hostname
David Parrish [Sun, 19 Sep 2004 23:19:23 +0000 (23:19 +0000)]
Add support for Hidden AVPs and chap-response
David Parrish [Thu, 16 Sep 2004 03:13:58 +0000 (03:13 +0000)]
foo
David Parrish [Thu, 2 Sep 2004 05:12:43 +0000 (05:12 +0000)]
Fix spec file to include plugins
David Parrish [Thu, 2 Sep 2004 04:51:04 +0000 (04:51 +0000)]
Foo
David Parrish [Thu, 2 Sep 2004 04:48:35 +0000 (04:48 +0000)]
Add spec file
David Parrish [Thu, 2 Sep 2004 04:31:59 +0000 (04:31 +0000)]
Releaes 2.0.2
David Parrish [Thu, 2 Sep 2004 04:29:30 +0000 (04:29 +0000)]
Add strip domain plugin
David Parrish [Thu, 2 Sep 2004 04:22:30 +0000 (04:22 +0000)]
Sync
David Parrish [Thu, 2 Sep 2004 04:20:21 +0000 (04:20 +0000)]
sync
David Parrish [Thu, 2 Sep 2004 04:18:07 +0000 (04:18 +0000)]
Cleanups and sync
David Parrish [Thu, 26 Aug 2004 06:24:12 +0000 (06:24 +0000)]
Make throttle without a username not crash
David Parrish [Thu, 26 Aug 2004 06:22:37 +0000 (06:22 +0000)]
Per-user upload and download throttle rates - Yuri
Make autothrottle.so understand cisco lcp:interface-config - Yuri
Show filter stats in show session - Yuri
David Parrish [Thu, 26 Aug 2004 04:43:52 +0000 (04:43 +0000)]
Set a maximum time to wait for radius to be ready on shutdown
David Parrish [Thu, 26 Aug 2004 04:38:40 +0000 (04:38 +0000)]
Show full radius id in show radius
David Parrish [Fri, 13 Aug 2004 00:02:50 +0000 (00:02 +0000)]
Add renegotiation patch from Yuri (ppp-aug10-patch)
Indentation and style cleanups
Make md5.c use standard memcpy and memset
David Parrish [Mon, 2 Aug 2004 06:06:28 +0000 (06:06 +0000)]
Allow cli session changes to happen if the session is timing out
David Parrish [Mon, 2 Aug 2004 05:40:21 +0000 (05:40 +0000)]
- Add support for LCP Ident and CallBack (rejection only) from Yuri
- Initiate LCP if not attempted by the client
David Parrish [Mon, 2 Aug 2004 03:38:01 +0000 (03:38 +0000)]
- Write pid file if filename is set
- Add startup script and monitor script from Yuri
- Some logging correctness fixes from Iain Wade
- Combined LCP patches from Iain and Yuri. This should allow Windows 2k/XP
clients to connect, as well Linksys DSL modems.
David Parrish [Wed, 28 Jul 2004 06:12:30 +0000 (06:12 +0000)]
Send my address if no bind_address on IPCP
David Parrish [Wed, 28 Jul 2004 04:01:12 +0000 (04:01 +0000)]
Don't warn about unknown subtype attribute
David Parrish [Wed, 28 Jul 2004 01:42:14 +0000 (01:42 +0000)]
Mail mailing list, not me
David Parrish [Tue, 27 Jul 2004 00:20:18 +0000 (00:20 +0000)]
Manual update for radius port settings - JK
David Parrish [Mon, 26 Jul 2004 00:20:41 +0000 (00:20 +0000)]
Makefile fix and config radius port patches from JK
Brendan O'Dea [Mon, 12 Jul 2004 15:16:27 +0000 (15:16 +0000)]
fix for -v from Juergen Kammer
Brendan O'Dea [Mon, 12 Jul 2004 14:49:01 +0000 (14:49 +0000)]
*** empty log message ***
Brendan O'Dea [Mon, 12 Jul 2004 14:35:51 +0000 (14:35 +0000)]
release 2.0.1
Brendan O'Dea [Mon, 12 Jul 2004 14:15:11 +0000 (14:15 +0000)]
Documentation update
Brendan O'Dea [Mon, 12 Jul 2004 08:21:45 +0000 (08:21 +0000)]
add lock_pages option
Brendan O'Dea [Mon, 12 Jul 2004 08:19:46 +0000 (08:19 +0000)]
more TODO stuff
Brendan O'Dea [Sun, 11 Jul 2004 07:57:33 +0000 (07:57 +0000)]
- TerminateAck fix from Yuri
- Adject cli_loop args for libcli 1.8.0
- Allow for backward compatabity in C_PING packets
- Don't send RADIUS stop messages from sessionshutdown when called from
sessionkill.
Brendan O'Dea [Thu, 8 Jul 2004 16:54:35 +0000 (16:54 +0000)]
- s/tap/tun/
- fix for LASTSEEN breakage: don't do anything in the CLI other than
flag changes to be made by the parent
- split out master parts from cluster_check_master() into cluster_check_slaves()
Brendan O'Dea [Thu, 8 Jul 2004 16:19:09 +0000 (16:19 +0000)]
update counters
Brendan O'Dea [Thu, 8 Jul 2004 16:16:48 +0000 (16:16 +0000)]
doc updates from mo
Brendan O'Dea [Thu, 8 Jul 2004 16:14:12 +0000 (16:14 +0000)]
update for new clustering
Brendan O'Dea [Wed, 7 Jul 2004 09:09:53 +0000 (09:09 +0000)]
- set hostname in CLI prompt
- add assertions to help identify odd LASTSEEN breakage
- make cluster_hb_interval work; include interval/timeout in heartbeats
so that a change on the master is propagated immediately to the slaves
- use fast heartbeats when there are slaves not up to date
- ensure basetime of shut down master is set to zero (prevent delayed election)
- fix radius session leak on IPCP timeout
- fix some off-by-one errors in tunnel/session loops
Brendan O'Dea [Mon, 5 Jul 2004 06:54:01 +0000 (06:54 +0000)]
roll in Michael's "limp along" fix for when a slave drops temporarily from the mcast group
Brendan O'Dea [Fri, 2 Jul 2004 07:31:23 +0000 (07:31 +0000)]
fluff to simplify diffs
Brendan O'Dea [Fri, 2 Jul 2004 07:30:43 +0000 (07:30 +0000)]
fold back in changes from production
Brendan O'Dea [Fri, 2 Jul 2004 07:29:07 +0000 (07:29 +0000)]
rename l2tpns.cfg as startup-config to match CONFIGFILE
Brendan O'Dea [Fri, 2 Jul 2004 07:26:18 +0000 (07:26 +0000)]
rename l2tpns.cfg to startup-config
fix installation of plugins
use DESTDIR rather than PREFIX
David Parrish [Mon, 28 Jun 2004 02:43:13 +0000 (02:43 +0000)]
* Update cli callbacks to work with libcli 1.6.
This supports privileged and unprivileged commands, as well as a configuration
mode
* Add help for all cli commands
* Add "show version" command
* Fix uptime counter display
* Fix nasty bug where cluster basetime can be set to 0 when sending initial
heartbeat
* Don't rmmod ip_conntrack, as this can take a lot of time
* Re-order logging in routeset such that the action is given before any error
* Use the correct gateway address when deleting routes
* Remove any routes when address changes
* Require authentication if telnet from remote ip
* Require enable password always
* Return error if show pool done on slave
* We MUST immediately exit if we're the wrong master!
David Parrish [Mon, 28 Jun 2004 02:21:20 +0000 (02:21 +0000)]
Add INTERNALS file
David Parrish [Wed, 23 Jun 2004 03:52:24 +0000 (03:52 +0000)]
* Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0
- Major release
- Completely replace active/standby clustering with a new peer-to-peer
clustering method which allows much greater throughput and is a lot more fault
tolerant
- Add internal tbf implementation for throttling without relying on tc and
kernel HTB
- Add support for iBGP and eBGP to advertise routes
- Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle",
"show tbf", "suspend bgp", "restart bgp", "show user"
- Interception destination must be set per-user
- If SMP machine, allow use of SCHED_FIFO, which should improve performance
- Added config option to send GARP at startup
- Added plugin_become_master and plugin_new_session_master plugin hooks
- Remove useless sessionsendarp(). This isn't needed now that we are using TUN
instead of TAP.
- ICMP rate limiting so not every unreachable packet is replied with an ICMP
unreachable message
- mangle table is not required on anything but the cluster master, so slaves
will drop the mangle table and attempt to unload the ip_conntrack module
- Statically assigned IP addresses (by Radius) work now
- Add -d command-line flag to detach and become a daemon
- Configuration file is now "/etc/l2tpns/startup-config"
- Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings
- Resend initial IPCP request until it's acknowleged by the client
- Better radius session cleanup logic
- Many miscellaenous bugfixes and performance enhancements
- Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features
David Parrish [Mon, 24 May 2004 04:42:50 +0000 (04:42 +0000)]
Add -d detach option
David Parrish [Mon, 24 May 2004 04:33:35 +0000 (04:33 +0000)]
Foo
David Parrish [Mon, 24 May 2004 04:33:31 +0000 (04:33 +0000)]
Version 1.2.0
David Parrish [Mon, 24 May 2004 04:29:38 +0000 (04:29 +0000)]
Optimisations
David Parrish [Mon, 24 May 2004 04:28:41 +0000 (04:28 +0000)]
Check return code when throttling users
David Parrish [Mon, 24 May 2004 04:26:01 +0000 (04:26 +0000)]
Use multiple radius sockets to allow more concurrent authentication requests
Remove per-packet plugin hooks (they are slow)
David Parrish [Mon, 24 May 2004 04:24:41 +0000 (04:24 +0000)]
Use multiple radius sockets to allow more concurrent authentication requests
David Parrish [Mon, 24 May 2004 04:24:06 +0000 (04:24 +0000)]
Add log_backtrace
Use multiple radius sockets to allow more concurrent authentication requests
Fix minimum length of IP packets
Add support for reading more than one packet per fd in each processing loop
Add variable cleanup_interval for changing cleanup interval
Bump version to 1.2.0
David Parrish [Mon, 24 May 2004 04:20:28 +0000 (04:20 +0000)]
- Use multiple radius sockets to allow more concurrent authentication requests
- Add gcc __attribute__ to logging functions
- Fix warnings shown by __attribute__
- Make sure regular cleanup happens regularly under high load
- Add variable cleanup_interval for changing cleanup interval
- Add support for reading more than one packet per fd in each processing loop
- This is configurable with the multi_read_count variable
- Remove segv handler so core dumps can happen
- Use nonblocking sockets
- Increase tun queue length
- Fix minimum length of IP packets
- Remove per-packet plugin hooks (they are slow)
- Don't drop session if no free RADIUS
- Don't expire more than 1000 sessions per cleanup interval
- Remove -a and -c command-line options. They don't work anyway
- Don't require file: in log_filename
David Parrish [Mon, 24 May 2004 04:18:23 +0000 (04:18 +0000)]
Fix SEGFAULT
David Parrish [Mon, 24 May 2004 04:13:06 +0000 (04:13 +0000)]
Use multiple radius sockets to allow more concurrent authentication requests
David Parrish [Mon, 24 May 2004 04:12:48 +0000 (04:12 +0000)]
Fix logging parameter errors
David Parrish [Mon, 24 May 2004 04:12:34 +0000 (04:12 +0000)]
Add gcc __attribute__ to logging functions
David Parrish [Mon, 24 May 2004 04:12:02 +0000 (04:12 +0000)]
Add username parameter to "show users" command
Fix counting tunnel rx errors as tunnel tx errors
Add "show throttle" command
David Parrish [Mon, 10 May 2004 00:39:34 +0000 (00:39 +0000)]
Init data before trying to use it