Commit graph

20 commits

Author SHA1 Message Date
Brendan O'Dea
9d199a1046 use standard uintN_t types for portability 2004-12-16 08:49:52 +00:00
Brendan O'Dea
f6f41eb777 don't send a RADIUS start record when ungardening on shutdown 2004-12-01 02:52:46 +00:00
Brendan O'Dea
d51ee0867b dropping packets; increase ip_conntrack_max 2004-11-30 21:54:23 +00:00
Brendan O'Dea
2f5b811429 make "established" a different tcp flag match
add fragment handling
drop IP address from LOG macro (function)
2004-11-29 02:17:17 +00:00
Brendan O'Dea
c79eb06333 pass cluster master state to plugin_control functions 2004-11-18 06:41:03 +00:00
Brendan O'Dea
bbf522dd9d fix late night typos 2004-11-18 05:44:36 +00:00
Brendan O'Dea
eb6906a28c - Add startup-config(5) manpage.
- Add snoopctl, throttlectl plugins.
- Update documentation.
2004-11-17 15:08:19 +00:00
Brendan O'Dea
5e01d2924d - Add startup-config(5) manpage [FIXME].
- Revise nsctl to allow arbitrary strings/args to be passed to plugins.
2004-11-17 08:23:34 +00:00
Brendan O'Dea
9cb9a8b436 add a callback to allow plugins to fetch values from the running config 2004-11-09 08:05:01 +00:00
Brendan O'Dea
4e0597cd50 use LOG for logging macro
clean up initlcp handling
2004-11-05 04:55:25 +00:00
Brendan O'Dea
7d7afb67c8 clean up plugins 2004-11-05 02:39:35 +00:00
Brendan O'Dea
284e4dd546 make log a conditional macro for _log 2004-11-03 13:23:58 +00:00
Brendan O'Dea
6f73a1b071 merge 2004-10-30 07:35:31 +00:00
David Parrish
7aa420ce9f * Update cli callbacks to work with libcli 1.6.
This supports privileged and unprivileged commands, as well as a configuration
  mode
* Add help for all cli commands
* Add "show version" command
* Fix uptime counter display
* Fix nasty bug where cluster basetime can be set to 0 when sending initial
  heartbeat
* Don't rmmod ip_conntrack, as this can take a lot of time
* Re-order logging in routeset such that the action is given before any error
* Use the correct gateway address when deleting routes
* Remove any routes when address changes
* Require authentication if telnet from remote ip
* Require enable password always
* Return error if show pool done on slave
* We MUST immediately exit if we're the wrong master!
2004-06-28 02:43:13 +00:00
David Parrish
c239d4b228 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0
- Major release
- Completely replace active/standby clustering with a new peer-to-peer
  clustering method which allows much greater throughput and is a lot more fault
  tolerant
- Add internal tbf implementation for throttling without relying on tc and
  kernel HTB
- Add support for iBGP and eBGP to advertise routes
- Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle",
  "show tbf", "suspend bgp", "restart bgp", "show user"
- Interception destination must be set per-user
- If SMP machine, allow use of SCHED_FIFO, which should improve performance
- Added config option to send GARP at startup
- Added plugin_become_master and plugin_new_session_master plugin hooks
- Remove useless sessionsendarp(). This isn't needed now that we are using TUN
  instead of TAP.
- ICMP rate limiting so not every unreachable packet is replied with an ICMP
  unreachable message
- mangle table is not required on anything but the cluster master, so slaves
  will drop the mangle table and attempt to unload the ip_conntrack module
- Statically assigned IP addresses (by Radius) work now
- Add -d command-line flag to detach and become a daemon
- Configuration file is now "/etc/l2tpns/startup-config"
- Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings
- Resend initial IPCP request until it's acknowleged by the client
- Better radius session cleanup logic
- Many miscellaenous bugfixes and performance enhancements
- Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features
2004-06-23 03:52:24 +00:00
David Parrish
69a383f460 Fix SEGFAULT 2004-05-24 04:18:23 +00:00
David Parrish
2957bcf7b0 Use multiple radius sockets to allow more concurrent authentication requests 2004-05-24 04:13:06 +00:00
David Parrish
0c736f6fe8 Don't use configure it's a waste of time 2004-03-05 00:22:06 +00:00
David Parrish
fc0a363208 * Fri Mar 5 2004 David Parrish <david@dparrish.com> 1.1.0
- Change all strcpy() calls to strncpy() to avoid buffer overflow potential
- Add ICMP host unreachable support
- Logging to syslog if log_file = "syslog:facility"
- Now requires libcli 1.5
- All configuration moves to a config structure
- Ability to modify and write config on the fly through command-line interface
- Config file support is removed, and now handled by the cli
- Show hostname in cli prompt
- Keep current state type for tunnels
- Add uptime command do CLI, which also shows real-time bandwidth utilisation
- Add goodbye command to cluster master, which forces droppping a slave
- Cache IP address allocation, so that reconnecting users get the same address
- Fix tunnel resend timeouts, so that dead tunnels will be cleaned up
- Allocate tunnels and radius without using a linked list which had issues
- Fix some off-by-one errors in tunnel and session and radius arrays
- Save and reload ip address pool when dieing
- Check version and size of reloaded data when restarting
- Remove plugin_config support
- Remove old support for TBF which didn't work anyway. HTB is required to do throttling now.
- Add COPYING and Changes files
2004-03-05 00:09:03 +00:00
David Parrish
c5e4c2cfc0 Initial revision 2003-12-16 07:07:39 +00:00