Commit graph

1310 commits

Author SHA1 Message Date
fred_nerk
307a34d625 Add INTERNALS file 2004-06-28 02:21:20 +00:00
David Parrish
df561af44e Add INTERNALS file 2004-06-28 02:21:20 +00:00
fred_nerk
ed90ea49e0 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0
- Major release
- Completely replace active/standby clustering with a new peer-to-peer
  clustering method which allows much greater throughput and is a lot more fault
  tolerant
- Add internal tbf implementation for throttling without relying on tc and
  kernel HTB
- Add support for iBGP and eBGP to advertise routes
- Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle",
  "show tbf", "suspend bgp", "restart bgp", "show user"
- Interception destination must be set per-user
- If SMP machine, allow use of SCHED_FIFO, which should improve performance
- Added config option to send GARP at startup
- Added plugin_become_master and plugin_new_session_master plugin hooks
- Remove useless sessionsendarp(). This isn't needed now that we are using TUN
  instead of TAP.
- ICMP rate limiting so not every unreachable packet is replied with an ICMP
  unreachable message
- mangle table is not required on anything but the cluster master, so slaves
  will drop the mangle table and attempt to unload the ip_conntrack module
- Statically assigned IP addresses (by Radius) work now
- Add -d command-line flag to detach and become a daemon
- Configuration file is now "/etc/l2tpns/startup-config"
- Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings
- Resend initial IPCP request until it's acknowleged by the client
- Better radius session cleanup logic
- Many miscellaenous bugfixes and performance enhancements
- Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features
2004-06-23 03:52:24 +00:00
David Parrish
c239d4b228 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0
- Major release
- Completely replace active/standby clustering with a new peer-to-peer
  clustering method which allows much greater throughput and is a lot more fault
  tolerant
- Add internal tbf implementation for throttling without relying on tc and
  kernel HTB
- Add support for iBGP and eBGP to advertise routes
- Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle",
  "show tbf", "suspend bgp", "restart bgp", "show user"
- Interception destination must be set per-user
- If SMP machine, allow use of SCHED_FIFO, which should improve performance
- Added config option to send GARP at startup
- Added plugin_become_master and plugin_new_session_master plugin hooks
- Remove useless sessionsendarp(). This isn't needed now that we are using TUN
  instead of TAP.
- ICMP rate limiting so not every unreachable packet is replied with an ICMP
  unreachable message
- mangle table is not required on anything but the cluster master, so slaves
  will drop the mangle table and attempt to unload the ip_conntrack module
- Statically assigned IP addresses (by Radius) work now
- Add -d command-line flag to detach and become a daemon
- Configuration file is now "/etc/l2tpns/startup-config"
- Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings
- Resend initial IPCP request until it's acknowleged by the client
- Better radius session cleanup logic
- Many miscellaenous bugfixes and performance enhancements
- Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features
2004-06-23 03:52:24 +00:00
fred_nerk
67fb382676 Add -d detach option 2004-05-24 04:42:50 +00:00
David Parrish
b4451ee1a4 Add -d detach option 2004-05-24 04:42:50 +00:00
fred_nerk
7285c3e91c Foo 2004-05-24 04:33:35 +00:00
David Parrish
e98737a168 Foo 2004-05-24 04:33:35 +00:00
fred_nerk
6528c2f3b6 Version 1.2.0 2004-05-24 04:33:31 +00:00
David Parrish
144bd8fb6b Version 1.2.0 2004-05-24 04:33:31 +00:00
fred_nerk
b5fc98195b Optimisations 2004-05-24 04:29:38 +00:00
David Parrish
3bfd1c4e87 Optimisations 2004-05-24 04:29:38 +00:00
fred_nerk
010ee3abba Check return code when throttling users 2004-05-24 04:28:41 +00:00
David Parrish
503df19134 Check return code when throttling users 2004-05-24 04:28:41 +00:00
fred_nerk
1af4c16721 Use multiple radius sockets to allow more concurrent authentication requests
Remove per-packet plugin hooks (they are slow)
2004-05-24 04:26:01 +00:00
David Parrish
546f970452 Use multiple radius sockets to allow more concurrent authentication requests
Remove per-packet plugin hooks (they are slow)
2004-05-24 04:26:01 +00:00
fred_nerk
d305da84f4 Use multiple radius sockets to allow more concurrent authentication requests 2004-05-24 04:24:41 +00:00
David Parrish
f764cfffe6 Use multiple radius sockets to allow more concurrent authentication requests 2004-05-24 04:24:41 +00:00
fred_nerk
98efdea254 Add log_backtrace
Use multiple radius sockets to allow more concurrent authentication requests
Fix minimum length of IP packets
Add support for reading more than one packet per fd in each processing loop
Add variable cleanup_interval for changing cleanup interval
Bump version to 1.2.0
2004-05-24 04:24:06 +00:00
David Parrish
11627344e7 Add log_backtrace
Use multiple radius sockets to allow more concurrent authentication requests
Fix minimum length of IP packets
Add support for reading more than one packet per fd in each processing loop
Add variable cleanup_interval for changing cleanup interval
Bump version to 1.2.0
2004-05-24 04:24:06 +00:00
fred_nerk
8512f6d924 - Use multiple radius sockets to allow more concurrent authentication requests
- Add gcc __attribute__ to logging functions
- Fix warnings shown by __attribute__
- Make sure regular cleanup happens regularly under high load
- Add variable cleanup_interval for changing cleanup interval
- Add support for reading more than one packet per fd in each processing loop
- This is configurable with the multi_read_count variable
- Remove segv handler so core dumps can happen
- Use nonblocking sockets
- Increase tun queue length
- Fix minimum length of IP packets
- Remove per-packet plugin hooks (they are slow)
- Don't drop session if no free RADIUS
- Don't expire more than 1000 sessions per cleanup interval
- Remove -a and -c command-line options. They don't work anyway
- Don't require file: in log_filename
2004-05-24 04:20:28 +00:00
David Parrish
c861a50b72 - Use multiple radius sockets to allow more concurrent authentication requests
- Add gcc __attribute__ to logging functions
- Fix warnings shown by __attribute__
- Make sure regular cleanup happens regularly under high load
- Add variable cleanup_interval for changing cleanup interval
- Add support for reading more than one packet per fd in each processing loop
- This is configurable with the multi_read_count variable
- Remove segv handler so core dumps can happen
- Use nonblocking sockets
- Increase tun queue length
- Fix minimum length of IP packets
- Remove per-packet plugin hooks (they are slow)
- Don't drop session if no free RADIUS
- Don't expire more than 1000 sessions per cleanup interval
- Remove -a and -c command-line options. They don't work anyway
- Don't require file: in log_filename
2004-05-24 04:20:28 +00:00
fred_nerk
fa7f80895b Fix SEGFAULT 2004-05-24 04:18:23 +00:00
David Parrish
69a383f460 Fix SEGFAULT 2004-05-24 04:18:23 +00:00
fred_nerk
00bb6daab4 Use multiple radius sockets to allow more concurrent authentication requests 2004-05-24 04:13:06 +00:00
David Parrish
2957bcf7b0 Use multiple radius sockets to allow more concurrent authentication requests 2004-05-24 04:13:06 +00:00
fred_nerk
6788d5ac3a Fix logging parameter errors 2004-05-24 04:12:48 +00:00
David Parrish
b1087392f5 Fix logging parameter errors 2004-05-24 04:12:48 +00:00
fred_nerk
b2fdec2286 Add gcc __attribute__ to logging functions 2004-05-24 04:12:34 +00:00
David Parrish
ebd407a833 Add gcc __attribute__ to logging functions 2004-05-24 04:12:34 +00:00
fred_nerk
6ab5516f1b Add username parameter to "show users" command
Fix counting tunnel rx errors as tunnel tx errors
Add "show throttle" command
2004-05-24 04:12:02 +00:00
David Parrish
7a9ca73727 Add username parameter to "show users" command
Fix counting tunnel rx errors as tunnel tx errors
Add "show throttle" command
2004-05-24 04:12:02 +00:00
fred_nerk
42144d4027 Init data before trying to use it 2004-05-10 00:39:34 +00:00
David Parrish
8a8b45c174 Init data before trying to use it 2004-05-10 00:39:34 +00:00
fred_nerk
ab096cbd15 Small typo fixes from Paul Lampron 2004-04-16 02:33:32 +00:00
David Parrish
32e5db5906 Small typo fixes from Paul Lampron 2004-04-16 02:33:32 +00:00
fred_nerk
de053c4c44 Release 1.1.1 2004-04-05 05:35:31 +00:00
David Parrish
9a4f911b3d Release 1.1.1 2004-04-05 05:35:31 +00:00
fred_nerk
14dced585a Don't use default 1:1 2004-04-05 05:29:13 +00:00
David Parrish
61dfc18a84 Don't use default 1:1 2004-04-05 05:29:13 +00:00
fred_nerk
80b0fbad63 Add manual. It's very long 2004-03-24 07:15:56 +00:00
David Parrish
aa41dea6e7 Add manual. It's very long 2004-03-24 07:15:56 +00:00
fred_nerk
c2f98ee931 Added autosnoop and autothrottle modules 2004-03-24 04:56:51 +00:00
David Parrish
8ed6b75f5f Added autosnoop and autothrottle modules 2004-03-24 04:56:51 +00:00
fred_nerk
9470c8e12f Fix makefile error 2004-03-22 05:26:17 +00:00
David Parrish
7d87e78a12 Fix makefile error 2004-03-22 05:26:17 +00:00
fred_nerk
31ebdec055 Don't mention configure, it's not used anymore 2004-03-09 00:31:49 +00:00
David Parrish
303ef1e6b1 Don't mention configure, it's not used anymore 2004-03-09 00:31:49 +00:00
fred_nerk
a2b74c9f3c . 2004-03-05 00:22:45 +00:00
David Parrish
8c270aac27 . 2004-03-05 00:22:45 +00:00