Commit graph

  • 2bbbe1c31b Make throttle without a username not crash fred_nerk 2004-08-26 06:24:12 +00:00
  • 133cc062ad Make throttle without a username not crash David Parrish 2004-08-26 06:24:12 +00:00
  • 90ebb19a3d Per-user upload and download throttle rates - Yuri Make autothrottle.so understand cisco lcp:interface-config - Yuri Show filter stats in show session - Yuri fred_nerk 2004-08-26 06:22:37 +00:00
  • 551daa285a Per-user upload and download throttle rates - Yuri Make autothrottle.so understand cisco lcp:interface-config - Yuri Show filter stats in show session - Yuri David Parrish 2004-08-26 06:22:37 +00:00
  • 32febcb0c7 Set a maximum time to wait for radius to be ready on shutdown fred_nerk 2004-08-26 04:43:52 +00:00
  • abbc5c5fce Set a maximum time to wait for radius to be ready on shutdown David Parrish 2004-08-26 04:43:52 +00:00
  • fd82089835 Show full radius id in show radius fred_nerk 2004-08-26 04:38:40 +00:00
  • 8b14a0a8b1 Show full radius id in show radius David Parrish 2004-08-26 04:38:40 +00:00
  • 43d0275f6d Add renegotiation patch from Yuri (ppp-aug10-patch) Indentation and style cleanups Make md5.c use standard memcpy and memset fred_nerk 2004-08-13 00:02:50 +00:00
  • d490579025 Add renegotiation patch from Yuri (ppp-aug10-patch) Indentation and style cleanups Make md5.c use standard memcpy and memset David Parrish 2004-08-13 00:02:50 +00:00
  • 4b16fcbdfd Allow cli session changes to happen if the session is timing out fred_nerk 2004-08-02 06:06:28 +00:00
  • 5779efc7ae Allow cli session changes to happen if the session is timing out David Parrish 2004-08-02 06:06:28 +00:00
  • 6e3d21bbdc - Add support for LCP Ident and CallBack (rejection only) from Yuri - Initiate LCP if not attempted by the client fred_nerk 2004-08-02 05:40:21 +00:00
  • f7a59cd6cc - Add support for LCP Ident and CallBack (rejection only) from Yuri - Initiate LCP if not attempted by the client David Parrish 2004-08-02 05:40:21 +00:00
  • 8c861521ae - Write pid file if filename is set - Add startup script and monitor script from Yuri - Some logging correctness fixes from Iain Wade - Combined LCP patches from Iain and Yuri. This should allow Windows 2k/XP clients to connect, as well Linksys DSL modems. fred_nerk 2004-08-02 03:38:01 +00:00
  • 9c8100d580 - Write pid file if filename is set - Add startup script and monitor script from Yuri - Some logging correctness fixes from Iain Wade - Combined LCP patches from Iain and Yuri. This should allow Windows 2k/XP clients to connect, as well Linksys DSL modems. David Parrish 2004-08-02 03:38:01 +00:00
  • 1aa6a3a96d Send my address if no bind_address on IPCP fred_nerk 2004-07-28 06:12:30 +00:00
  • 99b207fddf Send my address if no bind_address on IPCP David Parrish 2004-07-28 06:12:30 +00:00
  • 7484eaf31b Don't warn about unknown subtype attribute fred_nerk 2004-07-28 04:01:12 +00:00
  • 439dc534eb Don't warn about unknown subtype attribute David Parrish 2004-07-28 04:01:12 +00:00
  • dde98c8fdb Mail mailing list, not me fred_nerk 2004-07-28 01:42:14 +00:00
  • feec7e0002 Mail mailing list, not me David Parrish 2004-07-28 01:42:14 +00:00
  • 38e422ebb6 Manual update for radius port settings - JK fred_nerk 2004-07-27 00:20:18 +00:00
  • 894841009d Manual update for radius port settings - JK David Parrish 2004-07-27 00:20:18 +00:00
  • ba1abbbd05 Makefile fix and config radius port patches from JK fred_nerk 2004-07-26 00:20:41 +00:00
  • a17df3e475 Makefile fix and config radius port patches from JK David Parrish 2004-07-26 00:20:41 +00:00
  • 4b259db0af fix for -v from Juergen Kammer bodea 2004-07-12 15:16:27 +00:00
  • 4ae7dabffe fix for -v from Juergen Kammer Brendan O'Dea 2004-07-12 15:16:27 +00:00
  • 6a05ab1aa2 *** empty log message *** bodea 2004-07-12 14:49:01 +00:00
  • 54c6a93a27 *** empty log message *** Brendan O'Dea 2004-07-12 14:49:01 +00:00
  • 090a573bb9 release 2.0.1 bodea 2004-07-12 14:35:51 +00:00
  • b72e4840c1 release 2.0.1 Brendan O'Dea 2004-07-12 14:35:51 +00:00
  • d284765af5 Documentation update bodea 2004-07-12 14:15:11 +00:00
  • 60589c977c Documentation update Brendan O'Dea 2004-07-12 14:15:11 +00:00
  • 74ee338c37 add lock_pages option bodea 2004-07-12 08:21:45 +00:00
  • a4c14149f2 add lock_pages option Brendan O'Dea 2004-07-12 08:21:45 +00:00
  • 73a05e3e42 more TODO stuff bodea 2004-07-12 08:19:46 +00:00
  • 6e1e4432fc more TODO stuff Brendan O'Dea 2004-07-12 08:19:46 +00:00
  • 3ef237977d - TerminateAck fix from Yuri - Adject cli_loop args for libcli 1.8.0 - Allow for backward compatabity in C_PING packets - Don't send RADIUS stop messages from sessionshutdown when called from sessionkill. bodea 2004-07-11 07:57:33 +00:00
  • eae3c0527f - TerminateAck fix from Yuri - Adject cli_loop args for libcli 1.8.0 - Allow for backward compatabity in C_PING packets - Don't send RADIUS stop messages from sessionshutdown when called from sessionkill. Brendan O'Dea 2004-07-11 07:57:33 +00:00
  • 570d0d5385 - s/tap/tun/ - fix for LASTSEEN breakage: don't do anything in the CLI other than flag changes to be made by the parent - split out master parts from cluster_check_master() into cluster_check_slaves() bodea 2004-07-08 16:54:35 +00:00
  • 6adc660b49 - s/tap/tun/ - fix for LASTSEEN breakage: don't do anything in the CLI other than flag changes to be made by the parent - split out master parts from cluster_check_master() into cluster_check_slaves() Brendan O'Dea 2004-07-08 16:54:35 +00:00
  • c7983582ea update counters bodea 2004-07-08 16:19:09 +00:00
  • 904838ad0c update counters Brendan O'Dea 2004-07-08 16:19:09 +00:00
  • 76c6a4d080 doc updates from mo bodea 2004-07-08 16:16:48 +00:00
  • 3a12cd7519 doc updates from mo Brendan O'Dea 2004-07-08 16:16:48 +00:00
  • c36ba9e38f update for new clustering bodea 2004-07-08 16:14:12 +00:00
  • 44b941b89c update for new clustering Brendan O'Dea 2004-07-08 16:14:12 +00:00
  • def1dfd3cc - set hostname in CLI prompt - add assertions to help identify odd LASTSEEN breakage - make cluster_hb_interval work; include interval/timeout in heartbeats so that a change on the master is propagated immediately to the slaves - use fast heartbeats when there are slaves not up to date - ensure basetime of shut down master is set to zero (prevent delayed election) - fix radius session leak on IPCP timeout - fix some off-by-one errors in tunnel/session loops bodea 2004-07-07 09:09:53 +00:00
  • 4ad7536258 - set hostname in CLI prompt - add assertions to help identify odd LASTSEEN breakage - make cluster_hb_interval work; include interval/timeout in heartbeats so that a change on the master is propagated immediately to the slaves - use fast heartbeats when there are slaves not up to date - ensure basetime of shut down master is set to zero (prevent delayed election) - fix radius session leak on IPCP timeout - fix some off-by-one errors in tunnel/session loops Brendan O'Dea 2004-07-07 09:09:53 +00:00
  • 52e205c75e roll in Michael's "limp along" fix for when a slave drops temporarily from the mcast group bodea 2004-07-05 06:54:01 +00:00
  • d78201b5d7 roll in Michael's "limp along" fix for when a slave drops temporarily from the mcast group Brendan O'Dea 2004-07-05 06:54:01 +00:00
  • dff555697a fluff to simplify diffs bodea 2004-07-02 07:31:23 +00:00
  • a5848e393c fluff to simplify diffs Brendan O'Dea 2004-07-02 07:31:23 +00:00
  • a8434db159 fold back in changes from production bodea 2004-07-02 07:30:43 +00:00
  • f4ff96a03e fold back in changes from production Brendan O'Dea 2004-07-02 07:30:43 +00:00
  • 75f862cde9 rename l2tpns.cfg as startup-config to match CONFIGFILE bodea 2004-07-02 07:29:07 +00:00
  • e5a7980770 rename l2tpns.cfg as startup-config to match CONFIGFILE Brendan O'Dea 2004-07-02 07:29:07 +00:00
  • 6069adbcfc rename l2tpns.cfg to startup-config fix installation of plugins use DESTDIR rather than PREFIX bodea 2004-07-02 07:26:18 +00:00
  • f706b16ca1 rename l2tpns.cfg to startup-config fix installation of plugins use DESTDIR rather than PREFIX Brendan O'Dea 2004-07-02 07:26:18 +00:00
  • eb3a6cd62d * Update cli callbacks to work with libcli 1.6. This supports privileged and unprivileged commands, as well as a configuration mode * Add help for all cli commands * Add "show version" command * Fix uptime counter display * Fix nasty bug where cluster basetime can be set to 0 when sending initial heartbeat * Don't rmmod ip_conntrack, as this can take a lot of time * Re-order logging in routeset such that the action is given before any error * Use the correct gateway address when deleting routes * Remove any routes when address changes * Require authentication if telnet from remote ip * Require enable password always * Return error if show pool done on slave * We MUST immediately exit if we're the wrong master! fred_nerk 2004-06-28 02:43:13 +00:00
  • 7aa420ce9f * Update cli callbacks to work with libcli 1.6. This supports privileged and unprivileged commands, as well as a configuration mode * Add help for all cli commands * Add "show version" command * Fix uptime counter display * Fix nasty bug where cluster basetime can be set to 0 when sending initial heartbeat * Don't rmmod ip_conntrack, as this can take a lot of time * Re-order logging in routeset such that the action is given before any error * Use the correct gateway address when deleting routes * Remove any routes when address changes * Require authentication if telnet from remote ip * Require enable password always * Return error if show pool done on slave * We MUST immediately exit if we're the wrong master! David Parrish 2004-06-28 02:43:13 +00:00
  • 307a34d625 Add INTERNALS file fred_nerk 2004-06-28 02:21:20 +00:00
  • df561af44e Add INTERNALS file David Parrish 2004-06-28 02:21:20 +00:00
  • ed90ea49e0 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0 - Major release - Completely replace active/standby clustering with a new peer-to-peer clustering method which allows much greater throughput and is a lot more fault tolerant - Add internal tbf implementation for throttling without relying on tc and kernel HTB - Add support for iBGP and eBGP to advertise routes - Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle", "show tbf", "suspend bgp", "restart bgp", "show user" - Interception destination must be set per-user - If SMP machine, allow use of SCHED_FIFO, which should improve performance - Added config option to send GARP at startup - Added plugin_become_master and plugin_new_session_master plugin hooks - Remove useless sessionsendarp(). This isn't needed now that we are using TUN instead of TAP. - ICMP rate limiting so not every unreachable packet is replied with an ICMP unreachable message - mangle table is not required on anything but the cluster master, so slaves will drop the mangle table and attempt to unload the ip_conntrack module - Statically assigned IP addresses (by Radius) work now - Add -d command-line flag to detach and become a daemon - Configuration file is now "/etc/l2tpns/startup-config" - Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings - Resend initial IPCP request until it's acknowleged by the client - Better radius session cleanup logic - Many miscellaenous bugfixes and performance enhancements - Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features fred_nerk 2004-06-23 03:52:24 +00:00
  • c239d4b228 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0 - Major release - Completely replace active/standby clustering with a new peer-to-peer clustering method which allows much greater throughput and is a lot more fault tolerant - Add internal tbf implementation for throttling without relying on tc and kernel HTB - Add support for iBGP and eBGP to advertise routes - Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle", "show tbf", "suspend bgp", "restart bgp", "show user" - Interception destination must be set per-user - If SMP machine, allow use of SCHED_FIFO, which should improve performance - Added config option to send GARP at startup - Added plugin_become_master and plugin_new_session_master plugin hooks - Remove useless sessionsendarp(). This isn't needed now that we are using TUN instead of TAP. - ICMP rate limiting so not every unreachable packet is replied with an ICMP unreachable message - mangle table is not required on anything but the cluster master, so slaves will drop the mangle table and attempt to unload the ip_conntrack module - Statically assigned IP addresses (by Radius) work now - Add -d command-line flag to detach and become a daemon - Configuration file is now "/etc/l2tpns/startup-config" - Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings - Resend initial IPCP request until it's acknowleged by the client - Better radius session cleanup logic - Many miscellaenous bugfixes and performance enhancements - Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features David Parrish 2004-06-23 03:52:24 +00:00
  • 67fb382676 Add -d detach option fred_nerk 2004-05-24 04:42:50 +00:00
  • b4451ee1a4 Add -d detach option David Parrish 2004-05-24 04:42:50 +00:00
  • 7285c3e91c Foo fred_nerk 2004-05-24 04:33:35 +00:00
  • e98737a168 Foo David Parrish 2004-05-24 04:33:35 +00:00
  • 6528c2f3b6 Version 1.2.0 fred_nerk 2004-05-24 04:33:31 +00:00
  • 144bd8fb6b Version 1.2.0 David Parrish 2004-05-24 04:33:31 +00:00
  • b5fc98195b Optimisations fred_nerk 2004-05-24 04:29:38 +00:00
  • 3bfd1c4e87 Optimisations David Parrish 2004-05-24 04:29:38 +00:00
  • 010ee3abba Check return code when throttling users fred_nerk 2004-05-24 04:28:41 +00:00
  • 503df19134 Check return code when throttling users David Parrish 2004-05-24 04:28:41 +00:00
  • 1af4c16721 Use multiple radius sockets to allow more concurrent authentication requests Remove per-packet plugin hooks (they are slow) fred_nerk 2004-05-24 04:26:01 +00:00
  • 546f970452 Use multiple radius sockets to allow more concurrent authentication requests Remove per-packet plugin hooks (they are slow) David Parrish 2004-05-24 04:26:01 +00:00
  • d305da84f4 Use multiple radius sockets to allow more concurrent authentication requests fred_nerk 2004-05-24 04:24:41 +00:00
  • f764cfffe6 Use multiple radius sockets to allow more concurrent authentication requests David Parrish 2004-05-24 04:24:41 +00:00
  • 98efdea254 Add log_backtrace Use multiple radius sockets to allow more concurrent authentication requests Fix minimum length of IP packets Add support for reading more than one packet per fd in each processing loop Add variable cleanup_interval for changing cleanup interval Bump version to 1.2.0 fred_nerk 2004-05-24 04:24:06 +00:00
  • 11627344e7 Add log_backtrace Use multiple radius sockets to allow more concurrent authentication requests Fix minimum length of IP packets Add support for reading more than one packet per fd in each processing loop Add variable cleanup_interval for changing cleanup interval Bump version to 1.2.0 David Parrish 2004-05-24 04:24:06 +00:00
  • 8512f6d924 - Use multiple radius sockets to allow more concurrent authentication requests - Add gcc __attribute__ to logging functions - Fix warnings shown by __attribute__ - Make sure regular cleanup happens regularly under high load - Add variable cleanup_interval for changing cleanup interval - Add support for reading more than one packet per fd in each processing loop - This is configurable with the multi_read_count variable - Remove segv handler so core dumps can happen - Use nonblocking sockets - Increase tun queue length - Fix minimum length of IP packets - Remove per-packet plugin hooks (they are slow) - Don't drop session if no free RADIUS - Don't expire more than 1000 sessions per cleanup interval - Remove -a and -c command-line options. They don't work anyway - Don't require file: in log_filename fred_nerk 2004-05-24 04:20:28 +00:00
  • c861a50b72 - Use multiple radius sockets to allow more concurrent authentication requests - Add gcc __attribute__ to logging functions - Fix warnings shown by __attribute__ - Make sure regular cleanup happens regularly under high load - Add variable cleanup_interval for changing cleanup interval - Add support for reading more than one packet per fd in each processing loop - This is configurable with the multi_read_count variable - Remove segv handler so core dumps can happen - Use nonblocking sockets - Increase tun queue length - Fix minimum length of IP packets - Remove per-packet plugin hooks (they are slow) - Don't drop session if no free RADIUS - Don't expire more than 1000 sessions per cleanup interval - Remove -a and -c command-line options. They don't work anyway - Don't require file: in log_filename David Parrish 2004-05-24 04:20:28 +00:00
  • fa7f80895b Fix SEGFAULT fred_nerk 2004-05-24 04:18:23 +00:00
  • 69a383f460 Fix SEGFAULT David Parrish 2004-05-24 04:18:23 +00:00
  • 00bb6daab4 Use multiple radius sockets to allow more concurrent authentication requests fred_nerk 2004-05-24 04:13:06 +00:00
  • 2957bcf7b0 Use multiple radius sockets to allow more concurrent authentication requests David Parrish 2004-05-24 04:13:06 +00:00
  • 6788d5ac3a Fix logging parameter errors fred_nerk 2004-05-24 04:12:48 +00:00
  • b1087392f5 Fix logging parameter errors David Parrish 2004-05-24 04:12:48 +00:00
  • b2fdec2286 Add gcc __attribute__ to logging functions fred_nerk 2004-05-24 04:12:34 +00:00
  • ebd407a833 Add gcc __attribute__ to logging functions David Parrish 2004-05-24 04:12:34 +00:00
  • 6ab5516f1b Add username parameter to "show users" command Fix counting tunnel rx errors as tunnel tx errors Add "show throttle" command fred_nerk 2004-05-24 04:12:02 +00:00
  • 7a9ca73727 Add username parameter to "show users" command Fix counting tunnel rx errors as tunnel tx errors Add "show throttle" command David Parrish 2004-05-24 04:12:02 +00:00
  • 42144d4027 Init data before trying to use it fred_nerk 2004-05-10 00:39:34 +00:00
  • 8a8b45c174 Init data before trying to use it David Parrish 2004-05-10 00:39:34 +00:00
  • ab096cbd15 Small typo fixes from Paul Lampron fred_nerk 2004-04-16 02:33:32 +00:00
  • 32e5db5906 Small typo fixes from Paul Lampron David Parrish 2004-04-16 02:33:32 +00:00
  • de053c4c44 Release 1.1.1 fred_nerk 2004-04-05 05:35:31 +00:00
  • 9a4f911b3d Release 1.1.1 David Parrish 2004-04-05 05:35:31 +00:00