summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd
AgeCommit message (Collapse)Author
2008-05-22- fix a bug in msgbuf_write() that caused a descriptor to stay in the fdGilles Chehade
list even after being sent successfully. this has imsg_get_fd() keep returning the first fd. no impact in relayd. "go for it" pyr@, "yeah someone screwed up in the copy" henning@
2008-05-17documentation tweaks.Igor Sobrado
ok (some time ago) jmc@
2008-05-16Clear source nodes on table changes in sticky mode. This has thePierre-Yves Ritschard
disadvantage of removing valid src nodes, but the advantage of not sending out traffic to hosts that are not up anymore. From a diff by <mkoc@prime.pl>, ok reyk@
2008-05-12Error out with usage line if additional arguments are given after thePierre-Yves Ritschard
option parsing. Found out the hard way by jdixon on ifstated. ok sobrado@, jdixon@, millert@
2008-05-08move the session keys used by dns in a protocol-specific private ptr.Reyk Floeter
2008-05-08missed to set the default for tables to round-robin, so it wasReyk Floeter
loadbalance after the grammar change. make it round-robin again.
2008-05-07add an alternative "route to" mode to relayd redirections which mapsReyk Floeter
to pf route-to instead of the default rdr. it is a first steps towards support for "direct server return" (dsr), an asynchronous mode where the load balanced servers send the replies to a different gateway like a l3 switch/router to handle higher amounts of return traffic. because the state handling in pf isn't optimal for this case yet, it just sees half of the TCP connection, the sessions are forced to time out after fixed number of seconds. discussed with many, thought about in the onsen
2008-05-06tweak previous;Jason McIntyre
2008-05-06the manpage mentioned "timeout" in relay sections, while the grammarReyk Floeter
expected the keywords "forward timeout". rename it to "session timeout" and sync the documentation with reality.
2008-05-06the message digest http check does not work on binary content, add manpageReyk Floeter
clarification. From bsd at openbsd dot rutgers dot edu, closes pr5801 ok pyr@
2008-05-06fix the table stats clr ioctlReyk Floeter
2008-05-06do not attempt to reload a configuration if we come from a non pfPierre-Yves Ritschard
requiring configuration to a pf requiring one. ok reyk@
2008-05-06Do not unconditionnaly load pf. If pf isn't required by the configurationPierre-Yves Ritschard
the initialisation isn't done properly.
2008-05-05clean up after reyk (tab at EOL)Henning Brauer
2008-05-05Put relay sockets in non blocking mode too. This got forgotten along thePierre-Yves Ritschard
way and didn't show since our read buffers are small. ``put it in'' reyk@
2008-03-24msg_controllen has to be CMSG_SPACE so that the kernel can account forTheo de Raadt
each cmsg_len (ie. msg_controllen = sum of CMSG_ALIGN(cmsg_len). This works now that kernel fd passing has been fixed to accept a bit of sloppiness because of this ABI repair. lots of discussion with kettenis
2008-03-21better handling of chunked encoding, further fixes after extensive testingReyk Floeter
2008-03-20handle the case that the Content-Length HTTP header may be 0Reyk Floeter
2008-03-15Repair more msg_controllen dealing with structures or arrays ofTheo de Raadt
descriptors; ok hshoexer, also looked at by kettenis and henning
2008-03-15Repair the simple cases for msg_controllen where it should just beTheo de Raadt
CMSG_SIZE(sizeof(int)), not sizeof(buffer) which may be larger because of alignment; ok kettenis hshoexer
2008-03-13Correct CMSG_SPACE and CMSG_LEN usage everywhere in the tree. Due toTheo de Raadt
an extensive discussion with otto, kettenis, millert, and hshoexer
2008-03-12nuke unused variable.Pierre-Yves Ritschard
2008-03-03tweak previous;Jason McIntyre
2008-03-03log a different notification message when the tcp check times out.Reyk Floeter
also adjust the documentation a little bit to decrease confusion about the check timeout. From pyr@ ok deraadt@
2008-03-03Inherit global table options.Reyk Floeter
From Armin Wolfermann ok pyr@ deraadt@
2008-03-03The fix removes the replacement of se_key from relay_dns_request. se_keyReyk Floeter
is assigned a random value for and id in relay_udp_server before where the SPLAY_INSERT is performed, se_outkey is set to the return id rather than the rl_dskkey. The relay_dns_request which occurs after the SPLAY_INSERT no longer updates se_outkey, or se_key. The request is sent using the random value already placed into the se_key when the session is created. From Nigel Taylor ok pyr@ deraadt@
2008-03-03improve the compare function of addresses respecting the ports; this will fixReyk Floeter
the tree lookups in some cases. From Nigel Taylor ok pyr@ deraadt@
2008-02-27Unbreak parser by initializing topfile correctly.Marco Pfatschbacher
I got fooled by patch(1). Sorry.
2008-02-26Have popfile() also close the main config file,Marco Pfatschbacher
but only do the final popfile call after yyparse() is done. This also fixes config reload on SIGHUP for some daemons. Spotted by otto@. OK deraadt@
2008-02-13bump copyrightReyk Floeter
2008-02-13no need to set values after bcopying the complete structReyk Floeter
2008-02-13stylistic change: move code to add protonodes from the BNF intoReyk Floeter
seperate functions in relayd.c (protonode_add/protonode_header). this code got to big to look nice in the BNF statements...
2008-02-11tweak previous;Jason McIntyre
2008-02-11unbreak the dns protocol handler, closes pr 5717Reyk Floeter
Thanks to Nigel Taylor
2008-02-11Marry relayd with snmpd using new "send trap" option: Request to sendReyk Floeter
a SNMP trap when the state of a host changes. relayd(8) will try to (re-)connect to snmpd(8) and request it to send a trap to the registered trap receivers, see snmpd.conf(5) for more information about the configuration. ok pyr@ thib@
2008-02-05Fix a debug printf. After the session members got a se_ prefix this oneThordur I. Bjornsson
was forgotten.
2008-02-04Move some prototypes from relay.c to relayd.h and remove there externsThordur I. Bjornsson
in other places; ok reyk@
2008-02-04Move the declaration of DPRINTF from relay.c too relayd.h so it can beThordur I. Bjornsson
reused; ok reyk@
2008-02-04declare se_relay as pointer to a struct relay not as a void pointer;Thordur I. Bjornsson
shuffle the forward decleration of struct relay around too accommodate this change; ok reyk@
2008-01-31add prefixes to names of structure elements to make it easier to grepThordur I. Bjornsson
for code, next struct session; ok reyk@;
2008-01-31add prefixes to names of structure elements to make it easier to grepReyk Floeter
for code, next struct relay. knf long line fixes will follow later. ok thib@
2008-01-31add prefixes to names of structure elements to make it easier to grepReyk Floeter
for code, start with struct relayd. finally. ok thib@
2008-01-29When doing reconfigure() dont run a purge_config() on theThordur I. Bjornsson
new_env if parse_config() fails, it's NULL and parse_config() already freed it; Prevents segfaults when relayctl issues a reload and there's a syntax error in the configuration file. OK reyk@
2008-01-29relayd(8) may lose memory allocate to varaible `cnl' (structReyk Floeter
ctl_natlook). Free `cnl' allocated memory on failure. From Igor Zinovik (zinovik at cs.karelia dot ru)
2008-01-29When relayd(8) accepts control it creates `connfd' descriptor with acceptReyk Floeter
function. Close it when ctl_conn allocation fails. From Igor Zinovik (zinovik at cs.karelia dot ru)
2008-01-29Free resources now that we don't always exit after an unsuccessfulPierre-Yves Ritschard
parsing of the configuration. From Igor Zinovik <zinovik at cs.karelia.ru> ok thib@ and me.
2007-12-20implement statistics for redirections, like the existing statisticsReyk Floeter
for relays. they can be viewed with the new "relayctl show redirects" command. (uses the previous change to pf_table.c to get the statistics) looks good pyr@
2007-12-12various improvements for the relay pages; ok reykJason McIntyre
2007-12-10Warn the user when reloading a new configuration fails instead of killingPierre-Yves Ritschard
the daemon. ok reyk@
2007-12-09- kill trailing whitespaceJason McIntyre
- kill useless .Pp