summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd
AgeCommit message (Collapse)Author
2012-12-18reorder some variables and move large buffers to the top of the stack.Reyk Floeter
2012-12-18remove unused variableReyk Floeter
2012-12-18no nead to touch argv later since we don't support non-getopt arguments.Reyk Floeter
2012-12-18doin't complain if the child processes exited cleanly.Reyk Floeter
2012-12-18cnl is only allocated if F_NATLOOK was specified before, so skip theReyk Floeter
extra check for F_NATLOOK and check if cnl is not NULL only. no functional change, but this might make it clear that there is no and was no memleak here.
2012-12-18reorder the variables a bit, no functionaly change.Reyk Floeter
2012-11-29Fix white spaces in relayd. No binary diff.Alexander Bluhm
2012-11-27Add format attributes to the proper functions and then fix the warningsPhilip Guenthe
that gcc then reports when compiling with -DDEBUG=2 ok reyk@ benno@
2012-11-21strtonum() can only handle a maximum of LLONG_MAXSebastian Benoit
fixes bug reported by Bogdan Andu, thanks ok reyk@ deraadt@ sthen@
2012-10-19Support additional scheduling algorithms in the load balancer:Reyk Floeter
least-states, random, source-hash. least-states is currently only supported for redirections and the other ones are currently only supported by relays. ok benno@
2012-10-10Fix the hash http filter action to initialize the hash key correctly afterReyk Floeter
the multiple relay tables commit.
2012-10-04spacingReyk Floeter
2012-10-03Only show "inflight" debugging message if compiled with DEBUG > 1.Reyk Floeter
2012-10-03Inherit and pass the relay table flags correctly.Reyk Floeter
2012-10-03Support more than one relay backup table. Instead of duplicating theReyk Floeter
code for main and backup table all over the place, turn the relay tables into a list attached to the relay. This improves the code and allows some other tricks with multiple tables later.
2012-09-21file descriptor accounting for relays: track how many connections toSebastian Benoit
backend servers are unopened and reserve fds for them. ok reyk@, "don't wait" deraadt@
2012-09-20Move the HTTP code into an extra file to make future changes easier toReyk Floeter
follow. No functional changes, only one function got renamed. ok benno@
2012-09-19Copy the host id value to the ICMP echo payload in network byte order andReyk Floeter
in a nicer way that silences the compiler. ok benno@
2012-09-19Fix ICMP checks by setting the socklen correctly before calling recvfrom().Reyk Floeter
ok benno@
2012-09-18prio 0 is valid, therefore, I chose an "impossible" value for prio meaningHenning Brauer
"not set" and used a PF_PRIO_NOTSET define for it. now that means that everything that creates a struct pf_rule doesn't get away with bzero'ing it, which turned out to be not so nice. so get rid of PF_PRIO_NOTSET, instead, make a rule+state flag PFSTATE_SETPRIO which indicates wether the prio should be set. ok benno claudio mikeb
2012-09-17Fix relay statistics. Found and fix by Erik Lax (erik -at- halon -dot- se)Sebastian Benoit
ok reyk
2012-08-24- rfc 5082 replaces rfc 3682; ok claudioJason McIntyre
- flesh out SEE ALSO in bgpd.8 - fix a formatting warning in relayd.conf.5
2012-07-13after connect() returns EINPROGRESS the connection can still fail,Sebastian Benoit
so check with getsockopt if the socket is open. ok mikeb@
2012-07-09Allow relayd to handle transactions > 2GB in sizeTheo de Raadt
tested by snapshot users and benno for a while ok benno
2012-07-09need a private copy of nitems()Theo de Raadt
2012-07-07rename prio in struct pf_rule and related structs to set_prio so it isHenning Brauer
utterly clear this is not a filter criteria but a packet modification thing. also preparation for upcoming changes, including one to unscrew this mess (I should not have to touch half the tree for this - ifixitlater) not user visible, ok gcc
2012-05-29do not overwrite the table timeout with the global timeout when aSebastian Benoit
table timeout is set. ok sthen@ giovanni@ henning@
2012-05-09Fix a desynchronization on host change during a running checkgiovanni
closes pr system/6627 diff submitted by Martin Matuska, thanks ok benno@
2012-05-08fix "label string" in http protocol. problem found by giovanni.Sebastian Benoit
ok giovanni@, henning@
2012-05-05better description of input to mode hash/loadbalanceSebastian Benoit
ok sthen@ jmc@
2012-04-30The message-body should be forwarded for GET,HEAD and OPTIONS methods as well.Sebastian Benoit
ok giovanni@, phessler@, henning@
2012-04-27A message-body should be forwarded for DELETE method too.giovanni
from Florian Obser ok pyr@
2012-04-24take a stab at documenting when arguments need quoted, and valid macroJason McIntyre
characters; prompted by a diff from robert peichaer org thanks gilles and henning for feedback ok deraadt zinke
2012-04-19relayd re-uses the event callbacks and passes the value of iev.dataTheo de Raadt
as the third argument (so that should be a copy of the 5th argument of event_set(). it boggles the mind.
2012-04-15fix some leaksJonathan Gray
ok krw@
2012-04-11delete excessive evtimer_pending; ok claudioTheo de Raadt
2012-04-11Do rate limiting of accept() when under pressure, like in other recentTheo de Raadt
daemons. Light testing by some relayd users; let me know if issues develop.
2012-03-24Allow relayd to use a separate SSL certificate for each portStuart Henderson
(/etc/ssl/host:port.crt, /etc/ssl/private/host:port.key). ok benno@, todd@ likes it too, doc tweak suggested by jmc.
2012-03-09set onrdomain and prio when creating pf rules, found by Gabriel Linder.Sebastian Benoit
ok henning@ phessler@ camield@ "looks good to me" mkb@
2012-02-01Append mandatory instance identifier (.0 for scalars), so other SNMPCamiel Dobbelaar
implementations can grok it. ok joel@
2012-01-21Only start the child processes after all of them reported to have loadedCamiel Dobbelaar
the config. Solves a race at startup time where processes can send status messages about hosts that other processes don't know about yet. (and have relayd abort with "desynchronized" or "invalid host id") ok henning pyr deraadt solves the problem ok from benno todd
2012-01-20Remove global carp demote option. It is currently broken, but also flawedCamiel Dobbelaar
by design. ok henning pyr
2011-11-12fix function names in fatalx() messagesCamiel Dobbelaar
ok mikeb
2011-09-21During socket splicing the relayd session timeouts could not beAlexander Bluhm
measured exactly in user land. Use the new idle timeout for socket splicing in the kernel to make it correct. Also do splicing with http if relayd does not check headers. ok mikeb
2011-09-16If a user configures logging explicitly in relayd.conf, do itAlexander Bluhm
regardlessly of debugging mode and compile switch. ok sthen@
2011-09-04KNF, fix white spaces in relayd. No binary change.Alexander Bluhm
ok pyr@ sthen@
2011-09-04Especially with SSL and short data transfers, it could happen thatAlexander Bluhm
the client closed before the connection to the server has been established. Then the relay closed immediately before transferring any data. The solution is to delay the close until the other side has an event buffer. ok sthen@
2011-09-04The relayd used the CHECK_TIMEOUT for connect and ssl handshake.Alexander Bluhm
This is 200 milliseconds and too short. Instead use the 600 seconds session timeout that is used for accepted sessions everywhere else. While there, make flag handling in relay_ssl_transaction() consistent to the other functions. tested and ok sthen@
2011-06-24seven main sections here, not six; from Nils AnspachJason McIntyre
in the long term, i guess we should avoid documenting the number of sections, since it's meaningless and is always in danger of going out of date...
2011-06-23Use a common text explaining how the various configuration parsers usingStuart Henderson
the standard OpenBSD-style parse.y handle continuing lines with backslashes, paying particular attention to how comments are handled (which can cause nasty side-effects if you're not expecting it). Most wording from jmc@, with suggestions from fgsch@, marc@, Richard Toohey, patrick keshishian and Florian Obser, ok jmc@.