summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd
AgeCommit message (Collapse)Author
2007-12-20implement statistics for redirections, like the existing statisticsReyk Floeter
for relays. they can be viewed with the new "relayctl show redirects" command. (uses the previous change to pf_table.c to get the statistics) looks good pyr@
2007-12-12various improvements for the relay pages; ok reykJason McIntyre
2007-12-10Warn the user when reloading a new configuration fails instead of killingPierre-Yves Ritschard
the daemon. ok reyk@
2007-12-09- kill trailing whitespaceJason McIntyre
- kill useless .Pp
2007-12-08Rename everything which reffered to services refer to rdr for internalsPierre-Yves Ritschard
(for instance: rename struct service to struct rdr), refer to redirects otherwise (hoststatectl output). ok reyk@
2007-12-08the manpages need some more workReyk Floeter
2007-12-08tweakReyk Floeter
2007-12-08forgotten service -> redirectionPierre-Yves Ritschard
ok reyk@
2007-12-08make the generic handler for TCP-based protocols the default (allowsReyk Floeter
to use "protocol foo" without defining a type).
2007-12-08some changes to the relayd.conf configuration language and grammar.Reyk Floeter
the tables will look more like pf tables, it is easier to re-use tables with different options, "services" will become "redirections" (they refer to rdr pf rules), sync configuration directives of redirect (l3, ex-service) relay (l7) sections (for example "virtual host" will become "listen on"), all target definitions will start with "forward to", etc. pp. (see relay.conf(5) and etc/relayd.conf) discussed with pyr and deraadt ok pyr@
2007-12-07adjust the manpages to use "Relay daemon"Reyk Floeter
2007-12-07partial update of the man pages to new relayd nameTheo de Raadt
2007-12-07hoststated gets renamed to relayd. easier to type, and actually saysReyk Floeter
what the daemon does - it is a relayer that pays attention to the status of pools of hosts; not a status checkers that happens to do some relaying
2007-12-05fix fd/ssl leak in hoststated ssl checksReyk Floeter
From Przemyslaw Frasunek, closes PR 5671
2007-11-28bump the current file descriptor resource limit (openfiles-cur) to theReyk Floeter
maximum number of file descriptors for this login class (openfiles-max) of the relay child processes. this will allow 1024 instead of just 128 open file descriptors in the default configuration (class daemon), use the openfiles-max capability and the sysctl kern.maxfiles to adjust the value. ok gilles@ pyr@
2007-11-28typosReyk Floeter
2007-11-28unref the label when free'ing a protocol nodeReyk Floeter
2007-11-26allow to add labels to protocol actions, they will be printed in httpReyk Floeter
error pages and can be used to refer to additional information. ok pyr@
2007-11-25"canonicalized hostname" instead of just "hostname" for the url actionReyk Floeter
2007-11-25in addition to IPv4/6 addresses, canonicalize the hostname for "url",Reyk Floeter
for example ".www...Example.com." will be translated to "www.example.com". ok gilles@
2007-11-24new sentence, new line;Jason McIntyre
2007-11-24tweak for hostnames without dots (like "localhost")Reyk Floeter
2007-11-24sort includes, adjust to style(9)Reyk Floeter
2007-11-24extend the url lookup algorithm to match the full URL and differentReyk Floeter
possible suffix/prefix combinations by stripping subdomains, path components, and the query args. ok and tested by gilles@
2007-11-24fix goto to jump to the right placeReyk Floeter
2007-11-23- use either "host name" or "hostname", i decided to use "hostname" everywhereReyk Floeter
- a URL instead of an URL (a "you-are-el") suggested by jmc@
2007-11-23re-implement the "mark" action and document it in the manpage:Reyk Floeter
it is possible to attach a mark to a session based on matching an entity (header, url, cookie, ...) and add conditional action for this mark. it works a bit like the tag/tagged keywords in pf, but i decided to pick a different name to avoid confusion. ok pyr@ gilles@
2007-11-23add cvs idStuart Henderson
ok pyr@
2007-11-23fix typoStuart Henderson
ok pyr@
2007-11-22shuffle some structure elements; avoid using enums in *_config structs.Reyk Floeter
2007-11-22Fix relay roundrobin mode to work correctly when multiple hosts in aReyk Floeter
table are down. Thanks to Preston Norvell at serialssolutions dot com for reporting the problem.
2007-11-22add (new) "url" protocol action, this can be used to match/filter URLReyk Floeter
suffix/prefix expressions like "example.com/index.html?args". a digest mode allows to match against anonymized SHA1/MD5 digests of suffix/prefix expressions.
2007-11-21move HTTP cookie and query lookup code from the into separate functionsReyk Floeter
(the if () else if () block was getting very big).
2007-11-21spacingReyk Floeter
2007-11-21spacingReyk Floeter
2007-11-21extend action grammar with "filter value" and "expect value" as aReyk Floeter
short form for "filter * from value" or "expect * from value".
2007-11-21move digest string handling into an extra function.Reyk Floeter
2007-11-21fix the tree comparison function. it turned out that it could failReyk Floeter
with large trees of protocol actions.
2007-11-21tweak previous;Jason McIntyre
2007-11-21rename the "url" filter action to "query" to use the correct term.Reyk Floeter
please update your hoststated.conf configurations. also add more examples to the manpage. alright pyr@
2007-11-21allow the http digest type to be either SHA1 or MD5 determined by theReyk Floeter
digest string length; it is compatible to any existing SHA1-only configurations. ok pyr@ gilles@
2007-11-21more work on the "filter" action: close the connection instantly whenReyk Floeter
receiving a filtered entity, fix some remaining issues.
2007-11-21document the fact that port can be specified in table statements insidePierre-Yves Ritschard
service sections. ok reyk@
2007-11-21make sure all hosts are checked when hoststatectl poll is issued, nowPierre-Yves Ritschard
that check interval can differ from table to table. ok reyk@
2007-11-20tweak previous;Jason McIntyre
2007-11-20limit the number of displayed lines per node in relay_protodebug().Reyk Floeter
2007-11-20allow to use the "include" directive in tables, services, relays, andReyk Floeter
protocols. ok pyr@
2007-11-20it may be desirable to send a HTTP error page with error code and aReyk Floeter
meaningful message if a HTTP/HTTPS relay closes the connection for some reason. for example, a "403 Forbidden" if the request was rejected by a filter. this will be enabled with the "return error" option and is disabled by default, the standard behaviour is to silently drop the connection; the browser may display an empty page in this case. the look+feel of the HTTP error page can be customized with a CSS style sheet, but we do not intend to allow customization of the error page contents (hoststated is not a webserver!). ok pyr@
2007-11-20Allow overriding the global interval in a table.Pierre-Yves Ritschard
Table specific intervals must be multiples of the global interval. help and ok reyk@
2007-11-20another fix to handle "expect" and "filter" actions in the new styleReyk Floeter
correctly. ok pyr@