Commit graph

321 commits

Author SHA1 Message Date
Samuel Thibault
cc012e18fa Add MessageAuthenticator support
To address RadiusBLAST vulnerability.

Fixes #16
2024-10-20 01:43:26 +02:00
Samuel Thibault
85044bc6a4 control: Queue packets received Out-of-Order
Retransmissions are done very slowly, so we'd really better store the
Out-of-Order messages so that we can catch up quickly once we get the
missing piece.
2024-05-13 20:14:58 +02:00
Samuel Thibault
3ab80a9d66 IPV6CP: suggest an interface identifier option
Some peers seem to be sending no such option. The rfc says in that case
to try to send an option with a suggested value. Don't insist on it
however if the peer still doesn't send any.

That can fix IPv6 for some peers.
2024-05-13 20:14:58 +02:00
Samuel Thibault
38bfd3f738 Add L2TP bridging offloading support 2024-05-13 20:14:58 +02:00
Samuel Thibault
a957ff08ee Throttle switching kernel acceleration
Creating/destroying interfaces etc. does take some time. When e.g. receiving
a lot of sessions as new slave, we don't want to stay stuck creating
hundreds of interfaces while we are already receiving control messages
that we have to forward to master not too late. Switching kernel
acceleration can wait a bit most of the time.
2024-05-13 20:14:58 +02:00
Samuel Thibault
a22295d804 Fasten quitting l2tp game
Drop routes as quickly as possible to lose as few packets as possible in the
meanwhile.
2024-05-13 20:14:58 +02:00
Samuel Thibault
0ac498d7d3 cli: Show acceleration interface name
And allow selecting a session through it
2024-05-13 20:14:56 +02:00
Samuel Thibault
58d038dc0b Add ICMPv6 support with acceleration 2024-05-13 20:14:38 +02:00
Samuel Thibault
5dcbd68b75 Add DHCPv6 support with acceleration 2024-05-13 20:14:38 +02:00
Samuel Thibault
a9e18411d3 Add L2TP offloading support
Fixes #13

Also-by: Dominique Martinet <asmadeus@codewreck.org>
2024-05-13 20:14:38 +02:00
Samuel Thibault
c3eb1be0b4 Separate out DHCP processing
So we can later call it on UDP datagrams obtained from UDP socket.
2024-05-13 20:14:38 +02:00
Samuel Thibault
8c04e26f3f Consolidate adding/removing routes
into routesset and routes6set.
2024-05-13 20:14:38 +02:00
Samuel Thibault
c7853de428 Consolidate stat update code
into
update_session_in_stat
update_session_out_stat
2024-05-13 20:14:38 +02:00
Samuel Thibault
5db476bb6e Add generic netlink infrastructure 2024-05-13 20:14:38 +02:00
Samuel Thibault
60329986b2 Rename netlink infrastructure to rtnetlink
We will introduce genetlink infrastructure just after this.
2024-05-13 20:14:38 +02:00
Samuel Thibault
fdf19f5467 cli: Fix missing closing file descriptors 2024-05-13 20:14:38 +02:00
Samuel Thibault
05772e2295 Add periodic RA sends
The RFC indeed say that we should send them periodically.  We were
previously only sending them along LCP echo replies, but echo requests
are typically sent only when there is no trafic, which RA need to be
sent even when there is trafic.
2023-12-04 19:41:57 +01:00
Samuel Thibault
3be9b1657a Note what changed in versions 8, 9 and 10 2023-12-03 21:24:54 +01:00
Samuel Thibault
3667bdfe80 Also clamp MSS on IPv6
Some routers erratically drop "Packet too big" icmp messages, and PMTU
discovery then doesn't work. We can however easily clamp MSS on IPv6 too.
2023-11-05 17:21:14 +01:00
Samuel Thibault
8e7bfa9a77 Add mp_mrru option
Some equipments seem not able to actually put options in Configure-Reject
messages, so we then have to disable MRRU by hand.
2023-02-07 12:45:29 +01:00
Samuel Thibault
7623522726 Avoid warning
The restart code is indeed only needed for reset cases, any other case
doesn't need anything there.
2022-11-03 11:51:43 +01:00
Samuel Thibault
fbf0c191e1 Fix operator priority
(notably ternary ?: is less prioritized than <=)
2022-11-03 11:50:04 +01:00
Sebastien Badia
d1536bdcfb
New release: 2.4.1 2022-09-03 01:10:37 +02:00
sebian
40a02aa8d5 Merge branch '64bit' into 'master'
Use 64bit counters for accounting

Closes #12

See merge request l2tpns/l2tpns!13
2022-07-02 12:16:54 +00:00
Samuel Thibault
71a60411a1 Use newer radius port 1812 by default
1645 has been marked as "old-radius" for a long time.
2022-05-28 09:33:05 +02:00
Samuel Thibault
31dedbbe66 Use 64bit counters for accounting
Otherwise with 5-minute reporting we overflow with >= ~100Mbps.

Fixes #12
2022-01-24 00:40:26 +01:00
Baptiste Jonglez
832945bb4b Fix reported l2tpns version number 2021-10-15 21:55:31 +02:00
Julien Rabier
bc2d55725b New release: 2.3.2 2021-01-31 17:35:36 +01:00
Julien Rabier
4824735794 New release: 2.3.1 2020-11-07 15:11:48 +01:00
Julien Rabier
cff4a52c50 New release: 2.3.0 2020-11-05 18:31:52 +01:00
Sebastien Badia
745de1082a
(maint) Fixes common spelling error
* minumum minimum
* remaing remaining
* Mismaching Mismatching
2020-04-28 10:53:18 +02:00
fendo
84082b35b1 Fix: mismatch variable type (cluster_port). 2017-05-27 11:13:58 +02:00
fendo
0f20bfda6a Add cluster_port parameter for Multiple clusters 2017-05-27 00:09:19 +02:00
fendo
7034e6a018 Sending IPv6_ra more often. 2017-01-14 14:03:34 +01:00
fendo
07e1df5b92 Add of the ppp_keepalive option. 2015-09-22 23:19:01 +02:00
fendo
9c77145f71 Add of the RDNSS option to ICMPv6 Router Advertisement (RA). 2014-10-02 00:28:57 +02:00
fendo
8d94f2020d new feature: If the user attribute "Framed-IPv6-Address" is defined then the ICMPv6_RA advertise this IPv6 address.
Fix: Incorrect delegation of IPv6 prefixes when multiple of 4 bits (nibble) (eg: /44, /52 ...).
2014-09-18 18:16:21 +02:00
fendo
e98fe68174 Added ability to define up to 5 IPv6 prefix delegation by user 2014-09-16 17:34:39 +02:00
fendo
b3f40f41f7 Add DHCPv6 functionality. 2014-09-11 16:19:57 +02:00
fendo
6b70732490 add attribut >no_throttle_local_IP 2013-11-12 21:33:42 +01:00
fendo
26a2025a1b Fix: wheezy warning compilation 2013-09-16 15:01:04 +02:00
fendo
9c1869ccb1 Adding the possibility to set multiple hostname. 2013-05-21 11:42:48 +02:00
fendo
7fd4346bbb add accounting parameter account_all_origin 2013-04-24 22:29:36 +02:00
fendo
1e722029bc Fix service_name management and add pppoe_only_equal_svc_name parameter 2013-04-09 17:03:00 +02:00
fendo
137bcc9981 Adding the possibility to listening multiple IP L2TP tunnels. 2013-03-06 22:18:32 +01:00
fendo
9e78f1af54 Fix: Tunnel creation does not work when the length of the hostname is odd. (revert fix: Add a uint16_t control buffer type, as a union) 2013-02-26 00:28:43 +01:00
fendo
ec1507a6c2 Add param disable no spoof 2013-02-11 00:15:36 +01:00
fendo
f5354e1754 Update debian/changelog 2013-02-10 23:43:53 +01:00
fendo
b85ea86670 small performance improvement in download (internet -> customer) 2013-02-07 00:00:37 +01:00
fendo
9fb78ffe6a Disable sending HELLO message for Apple compatibility 2013-01-15 15:22:43 +01:00