Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-12-18 | reorder some variables and move large buffers to the top of the stack. | Reyk Floeter | |
2012-12-18 | remove unused variable | Reyk Floeter | |
2012-12-18 | no nead to touch argv later since we don't support non-getopt arguments. | Reyk Floeter | |
2012-12-18 | doin't complain if the child processes exited cleanly. | Reyk Floeter | |
2012-12-18 | cnl is only allocated if F_NATLOOK was specified before, so skip the | Reyk Floeter | |
extra check for F_NATLOOK and check if cnl is not NULL only. no functional change, but this might make it clear that there is no and was no memleak here. | |||
2012-12-18 | reorder the variables a bit, no functionaly change. | Reyk Floeter | |
2012-11-29 | Fix white spaces in relayd. No binary diff. | Alexander Bluhm | |
2012-11-27 | Add format attributes to the proper functions and then fix the warnings | Philip Guenthe | |
that gcc then reports when compiling with -DDEBUG=2 ok reyk@ benno@ | |||
2012-11-21 | strtonum() can only handle a maximum of LLONG_MAX | Sebastian Benoit | |
fixes bug reported by Bogdan Andu, thanks ok reyk@ deraadt@ sthen@ | |||
2012-10-19 | Support additional scheduling algorithms in the load balancer: | Reyk Floeter | |
least-states, random, source-hash. least-states is currently only supported for redirections and the other ones are currently only supported by relays. ok benno@ | |||
2012-10-10 | Fix the hash http filter action to initialize the hash key correctly after | Reyk Floeter | |
the multiple relay tables commit. | |||
2012-10-04 | spacing | Reyk Floeter | |
2012-10-03 | Only show "inflight" debugging message if compiled with DEBUG > 1. | Reyk Floeter | |
2012-10-03 | Inherit and pass the relay table flags correctly. | Reyk Floeter | |
2012-10-03 | Support more than one relay backup table. Instead of duplicating the | Reyk Floeter | |
code for main and backup table all over the place, turn the relay tables into a list attached to the relay. This improves the code and allows some other tricks with multiple tables later. | |||
2012-09-21 | file descriptor accounting for relays: track how many connections to | Sebastian Benoit | |
backend servers are unopened and reserve fds for them. ok reyk@, "don't wait" deraadt@ | |||
2012-09-20 | Move the HTTP code into an extra file to make future changes easier to | Reyk Floeter | |
follow. No functional changes, only one function got renamed. ok benno@ | |||
2012-09-19 | Copy the host id value to the ICMP echo payload in network byte order and | Reyk Floeter | |
in a nicer way that silences the compiler. ok benno@ | |||
2012-09-19 | Fix ICMP checks by setting the socklen correctly before calling recvfrom(). | Reyk Floeter | |
ok benno@ | |||
2012-09-18 | prio 0 is valid, therefore, I chose an "impossible" value for prio meaning | Henning Brauer | |
"not set" and used a PF_PRIO_NOTSET define for it. now that means that everything that creates a struct pf_rule doesn't get away with bzero'ing it, which turned out to be not so nice. so get rid of PF_PRIO_NOTSET, instead, make a rule+state flag PFSTATE_SETPRIO which indicates wether the prio should be set. ok benno claudio mikeb | |||
2012-09-17 | Fix relay statistics. Found and fix by Erik Lax (erik -at- halon -dot- se) | Sebastian Benoit | |
ok reyk | |||
2012-08-24 | - rfc 5082 replaces rfc 3682; ok claudio | Jason McIntyre | |
- flesh out SEE ALSO in bgpd.8 - fix a formatting warning in relayd.conf.5 | |||
2012-07-13 | after connect() returns EINPROGRESS the connection can still fail, | Sebastian Benoit | |
so check with getsockopt if the socket is open. ok mikeb@ | |||
2012-07-09 | Allow relayd to handle transactions > 2GB in size | Theo de Raadt | |
tested by snapshot users and benno for a while ok benno | |||
2012-07-09 | need a private copy of nitems() | Theo de Raadt | |
2012-07-07 | rename prio in struct pf_rule and related structs to set_prio so it is | Henning Brauer | |
utterly clear this is not a filter criteria but a packet modification thing. also preparation for upcoming changes, including one to unscrew this mess (I should not have to touch half the tree for this - ifixitlater) not user visible, ok gcc | |||
2012-05-29 | do not overwrite the table timeout with the global timeout when a | Sebastian Benoit | |
table timeout is set. ok sthen@ giovanni@ henning@ | |||
2012-05-09 | Fix a desynchronization on host change during a running check | giovanni | |
closes pr system/6627 diff submitted by Martin Matuska, thanks ok benno@ | |||
2012-05-08 | fix "label string" in http protocol. problem found by giovanni. | Sebastian Benoit | |
ok giovanni@, henning@ | |||
2012-05-05 | better description of input to mode hash/loadbalance | Sebastian Benoit | |
ok sthen@ jmc@ | |||
2012-04-30 | The message-body should be forwarded for GET,HEAD and OPTIONS methods as well. | Sebastian Benoit | |
ok giovanni@, phessler@, henning@ | |||
2012-04-27 | A message-body should be forwarded for DELETE method too. | giovanni | |
from Florian Obser ok pyr@ | |||
2012-04-24 | take a stab at documenting when arguments need quoted, and valid macro | Jason McIntyre | |
characters; prompted by a diff from robert peichaer org thanks gilles and henning for feedback ok deraadt zinke | |||
2012-04-19 | relayd re-uses the event callbacks and passes the value of iev.data | Theo de Raadt | |
as the third argument (so that should be a copy of the 5th argument of event_set(). it boggles the mind. | |||
2012-04-15 | fix some leaks | Jonathan Gray | |
ok krw@ | |||
2012-04-11 | delete excessive evtimer_pending; ok claudio | Theo de Raadt | |
2012-04-11 | Do rate limiting of accept() when under pressure, like in other recent | Theo de Raadt | |
daemons. Light testing by some relayd users; let me know if issues develop. | |||
2012-03-24 | Allow relayd to use a separate SSL certificate for each port | Stuart Henderson | |
(/etc/ssl/host:port.crt, /etc/ssl/private/host:port.key). ok benno@, todd@ likes it too, doc tweak suggested by jmc. | |||
2012-03-09 | set onrdomain and prio when creating pf rules, found by Gabriel Linder. | Sebastian Benoit | |
ok henning@ phessler@ camield@ "looks good to me" mkb@ | |||
2012-02-01 | Append mandatory instance identifier (.0 for scalars), so other SNMP | Camiel Dobbelaar | |
implementations can grok it. ok joel@ | |||
2012-01-21 | Only start the child processes after all of them reported to have loaded | Camiel Dobbelaar | |
the config. Solves a race at startup time where processes can send status messages about hosts that other processes don't know about yet. (and have relayd abort with "desynchronized" or "invalid host id") ok henning pyr deraadt solves the problem ok from benno todd | |||
2012-01-20 | Remove global carp demote option. It is currently broken, but also flawed | Camiel Dobbelaar | |
by design. ok henning pyr | |||
2011-11-12 | fix function names in fatalx() messages | Camiel Dobbelaar | |
ok mikeb | |||
2011-09-21 | During socket splicing the relayd session timeouts could not be | Alexander Bluhm | |
measured exactly in user land. Use the new idle timeout for socket splicing in the kernel to make it correct. Also do splicing with http if relayd does not check headers. ok mikeb | |||
2011-09-16 | If a user configures logging explicitly in relayd.conf, do it | Alexander Bluhm | |
regardlessly of debugging mode and compile switch. ok sthen@ | |||
2011-09-04 | KNF, fix white spaces in relayd. No binary change. | Alexander Bluhm | |
ok pyr@ sthen@ | |||
2011-09-04 | Especially with SSL and short data transfers, it could happen that | Alexander Bluhm | |
the client closed before the connection to the server has been established. Then the relay closed immediately before transferring any data. The solution is to delay the close until the other side has an event buffer. ok sthen@ | |||
2011-09-04 | The relayd used the CHECK_TIMEOUT for connect and ssl handshake. | Alexander Bluhm | |
This is 200 milliseconds and too short. Instead use the 600 seconds session timeout that is used for accepted sessions everywhere else. While there, make flag handling in relay_ssl_transaction() consistent to the other functions. tested and ok sthen@ | |||
2011-06-24 | seven main sections here, not six; from Nils Anspach | Jason McIntyre | |
in the long term, i guess we should avoid documenting the number of sections, since it's meaningless and is always in danger of going out of date... | |||
2011-06-23 | Use a common text explaining how the various configuration parsers using | Stuart Henderson | |
the standard OpenBSD-style parse.y handle continuing lines with backslashes, paying particular attention to how comments are handled (which can cause nasty side-effects if you're not expecting it). Most wording from jmc@, with suggestions from fgsch@, marc@, Richard Toohey, patrick keshishian and Florian Obser, ok jmc@. |