Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-12-20 | implement statistics for redirections, like the existing statistics | Reyk Floeter | |
for relays. they can be viewed with the new "relayctl show redirects" command. (uses the previous change to pf_table.c to get the statistics) looks good pyr@ | |||
2007-12-12 | various improvements for the relay pages; ok reyk | Jason McIntyre | |
2007-12-10 | Warn the user when reloading a new configuration fails instead of killing | Pierre-Yves Ritschard | |
the daemon. ok reyk@ | |||
2007-12-09 | - kill trailing whitespace | Jason McIntyre | |
- kill useless .Pp | |||
2007-12-08 | Rename everything which reffered to services refer to rdr for internals | Pierre-Yves Ritschard | |
(for instance: rename struct service to struct rdr), refer to redirects otherwise (hoststatectl output). ok reyk@ | |||
2007-12-08 | the manpages need some more work | Reyk Floeter | |
2007-12-08 | tweak | Reyk Floeter | |
2007-12-08 | forgotten service -> redirection | Pierre-Yves Ritschard | |
ok reyk@ | |||
2007-12-08 | make the generic handler for TCP-based protocols the default (allows | Reyk Floeter | |
to use "protocol foo" without defining a type). | |||
2007-12-08 | some changes to the relayd.conf configuration language and grammar. | Reyk Floeter | |
the tables will look more like pf tables, it is easier to re-use tables with different options, "services" will become "redirections" (they refer to rdr pf rules), sync configuration directives of redirect (l3, ex-service) relay (l7) sections (for example "virtual host" will become "listen on"), all target definitions will start with "forward to", etc. pp. (see relay.conf(5) and etc/relayd.conf) discussed with pyr and deraadt ok pyr@ | |||
2007-12-07 | adjust the manpages to use "Relay daemon" | Reyk Floeter | |
2007-12-07 | partial update of the man pages to new relayd name | Theo de Raadt | |
2007-12-07 | hoststated gets renamed to relayd. easier to type, and actually says | Reyk Floeter | |
what the daemon does - it is a relayer that pays attention to the status of pools of hosts; not a status checkers that happens to do some relaying | |||
2007-12-05 | fix fd/ssl leak in hoststated ssl checks | Reyk Floeter | |
From Przemyslaw Frasunek, closes PR 5671 | |||
2007-11-28 | bump the current file descriptor resource limit (openfiles-cur) to the | Reyk Floeter | |
maximum number of file descriptors for this login class (openfiles-max) of the relay child processes. this will allow 1024 instead of just 128 open file descriptors in the default configuration (class daemon), use the openfiles-max capability and the sysctl kern.maxfiles to adjust the value. ok gilles@ pyr@ | |||
2007-11-28 | typos | Reyk Floeter | |
2007-11-28 | unref the label when free'ing a protocol node | Reyk Floeter | |
2007-11-26 | allow to add labels to protocol actions, they will be printed in http | Reyk Floeter | |
error pages and can be used to refer to additional information. ok pyr@ | |||
2007-11-25 | "canonicalized hostname" instead of just "hostname" for the url action | Reyk Floeter | |
2007-11-25 | in addition to IPv4/6 addresses, canonicalize the hostname for "url", | Reyk Floeter | |
for example ".www...Example.com." will be translated to "www.example.com". ok gilles@ | |||
2007-11-24 | new sentence, new line; | Jason McIntyre | |
2007-11-24 | tweak for hostnames without dots (like "localhost") | Reyk Floeter | |
2007-11-24 | sort includes, adjust to style(9) | Reyk Floeter | |
2007-11-24 | extend the url lookup algorithm to match the full URL and different | Reyk Floeter | |
possible suffix/prefix combinations by stripping subdomains, path components, and the query args. ok and tested by gilles@ | |||
2007-11-24 | fix goto to jump to the right place | Reyk Floeter | |
2007-11-23 | - use either "host name" or "hostname", i decided to use "hostname" everywhere | Reyk Floeter | |
- a URL instead of an URL (a "you-are-el") suggested by jmc@ | |||
2007-11-23 | re-implement the "mark" action and document it in the manpage: | Reyk Floeter | |
it is possible to attach a mark to a session based on matching an entity (header, url, cookie, ...) and add conditional action for this mark. it works a bit like the tag/tagged keywords in pf, but i decided to pick a different name to avoid confusion. ok pyr@ gilles@ | |||
2007-11-23 | add cvs id | Stuart Henderson | |
ok pyr@ | |||
2007-11-23 | fix typo | Stuart Henderson | |
ok pyr@ | |||
2007-11-22 | shuffle some structure elements; avoid using enums in *_config structs. | Reyk Floeter | |
2007-11-22 | Fix relay roundrobin mode to work correctly when multiple hosts in a | Reyk Floeter | |
table are down. Thanks to Preston Norvell at serialssolutions dot com for reporting the problem. | |||
2007-11-22 | add (new) "url" protocol action, this can be used to match/filter URL | Reyk Floeter | |
suffix/prefix expressions like "example.com/index.html?args". a digest mode allows to match against anonymized SHA1/MD5 digests of suffix/prefix expressions. | |||
2007-11-21 | move HTTP cookie and query lookup code from the into separate functions | Reyk Floeter | |
(the if () else if () block was getting very big). | |||
2007-11-21 | spacing | Reyk Floeter | |
2007-11-21 | spacing | Reyk Floeter | |
2007-11-21 | extend action grammar with "filter value" and "expect value" as a | Reyk Floeter | |
short form for "filter * from value" or "expect * from value". | |||
2007-11-21 | move digest string handling into an extra function. | Reyk Floeter | |
2007-11-21 | fix the tree comparison function. it turned out that it could fail | Reyk Floeter | |
with large trees of protocol actions. | |||
2007-11-21 | tweak previous; | Jason McIntyre | |
2007-11-21 | rename the "url" filter action to "query" to use the correct term. | Reyk Floeter | |
please update your hoststated.conf configurations. also add more examples to the manpage. alright pyr@ | |||
2007-11-21 | allow the http digest type to be either SHA1 or MD5 determined by the | Reyk Floeter | |
digest string length; it is compatible to any existing SHA1-only configurations. ok pyr@ gilles@ | |||
2007-11-21 | more work on the "filter" action: close the connection instantly when | Reyk Floeter | |
receiving a filtered entity, fix some remaining issues. | |||
2007-11-21 | document the fact that port can be specified in table statements inside | Pierre-Yves Ritschard | |
service sections. ok reyk@ | |||
2007-11-21 | make sure all hosts are checked when hoststatectl poll is issued, now | Pierre-Yves Ritschard | |
that check interval can differ from table to table. ok reyk@ | |||
2007-11-20 | tweak previous; | Jason McIntyre | |
2007-11-20 | limit the number of displayed lines per node in relay_protodebug(). | Reyk Floeter | |
2007-11-20 | allow to use the "include" directive in tables, services, relays, and | Reyk Floeter | |
protocols. ok pyr@ | |||
2007-11-20 | it may be desirable to send a HTTP error page with error code and a | Reyk Floeter | |
meaningful message if a HTTP/HTTPS relay closes the connection for some reason. for example, a "403 Forbidden" if the request was rejected by a filter. this will be enabled with the "return error" option and is disabled by default, the standard behaviour is to silently drop the connection; the browser may display an empty page in this case. the look+feel of the HTTP error page can be customized with a CSS style sheet, but we do not intend to allow customization of the error page contents (hoststated is not a webserver!). ok pyr@ | |||
2007-11-20 | Allow overriding the global interval in a table. | Pierre-Yves Ritschard | |
Table specific intervals must be multiples of the global interval. help and ok reyk@ | |||
2007-11-20 | another fix to handle "expect" and "filter" actions in the new style | Reyk Floeter | |
correctly. ok pyr@ |