summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd
AgeCommit message (Collapse)Author
2007-11-28bump the current file descriptor resource limit (openfiles-cur) to theReyk Floeter
maximum number of file descriptors for this login class (openfiles-max) of the relay child processes. this will allow 1024 instead of just 128 open file descriptors in the default configuration (class daemon), use the openfiles-max capability and the sysctl kern.maxfiles to adjust the value. ok gilles@ pyr@
2007-11-28typosReyk Floeter
2007-11-28unref the label when free'ing a protocol nodeReyk Floeter
2007-11-26allow to add labels to protocol actions, they will be printed in httpReyk Floeter
error pages and can be used to refer to additional information. ok pyr@
2007-11-25"canonicalized hostname" instead of just "hostname" for the url actionReyk Floeter
2007-11-25in addition to IPv4/6 addresses, canonicalize the hostname for "url",Reyk Floeter
for example ".www...Example.com." will be translated to "www.example.com". ok gilles@
2007-11-24new sentence, new line;Jason McIntyre
2007-11-24tweak for hostnames without dots (like "localhost")Reyk Floeter
2007-11-24sort includes, adjust to style(9)Reyk Floeter
2007-11-24extend the url lookup algorithm to match the full URL and differentReyk Floeter
possible suffix/prefix combinations by stripping subdomains, path components, and the query args. ok and tested by gilles@
2007-11-24fix goto to jump to the right placeReyk Floeter
2007-11-23- use either "host name" or "hostname", i decided to use "hostname" everywhereReyk Floeter
- a URL instead of an URL (a "you-are-el") suggested by jmc@
2007-11-23re-implement the "mark" action and document it in the manpage:Reyk Floeter
it is possible to attach a mark to a session based on matching an entity (header, url, cookie, ...) and add conditional action for this mark. it works a bit like the tag/tagged keywords in pf, but i decided to pick a different name to avoid confusion. ok pyr@ gilles@
2007-11-23add cvs idStuart Henderson
ok pyr@
2007-11-23fix typoStuart Henderson
ok pyr@
2007-11-22shuffle some structure elements; avoid using enums in *_config structs.Reyk Floeter
2007-11-22Fix relay roundrobin mode to work correctly when multiple hosts in aReyk Floeter
table are down. Thanks to Preston Norvell at serialssolutions dot com for reporting the problem.
2007-11-22add (new) "url" protocol action, this can be used to match/filter URLReyk Floeter
suffix/prefix expressions like "example.com/index.html?args". a digest mode allows to match against anonymized SHA1/MD5 digests of suffix/prefix expressions.
2007-11-21move HTTP cookie and query lookup code from the into separate functionsReyk Floeter
(the if () else if () block was getting very big).
2007-11-21spacingReyk Floeter
2007-11-21spacingReyk Floeter
2007-11-21extend action grammar with "filter value" and "expect value" as aReyk Floeter
short form for "filter * from value" or "expect * from value".
2007-11-21move digest string handling into an extra function.Reyk Floeter
2007-11-21fix the tree comparison function. it turned out that it could failReyk Floeter
with large trees of protocol actions.
2007-11-21tweak previous;Jason McIntyre
2007-11-21rename the "url" filter action to "query" to use the correct term.Reyk Floeter
please update your hoststated.conf configurations. also add more examples to the manpage. alright pyr@
2007-11-21allow the http digest type to be either SHA1 or MD5 determined by theReyk Floeter
digest string length; it is compatible to any existing SHA1-only configurations. ok pyr@ gilles@
2007-11-21more work on the "filter" action: close the connection instantly whenReyk Floeter
receiving a filtered entity, fix some remaining issues.
2007-11-21document the fact that port can be specified in table statements insidePierre-Yves Ritschard
service sections. ok reyk@
2007-11-21make sure all hosts are checked when hoststatectl poll is issued, nowPierre-Yves Ritschard
that check interval can differ from table to table. ok reyk@
2007-11-20tweak previous;Jason McIntyre
2007-11-20limit the number of displayed lines per node in relay_protodebug().Reyk Floeter
2007-11-20allow to use the "include" directive in tables, services, relays, andReyk Floeter
protocols. ok pyr@
2007-11-20it may be desirable to send a HTTP error page with error code and aReyk Floeter
meaningful message if a HTTP/HTTPS relay closes the connection for some reason. for example, a "403 Forbidden" if the request was rejected by a filter. this will be enabled with the "return error" option and is disabled by default, the standard behaviour is to silently drop the connection; the browser may display an empty page in this case. the look+feel of the HTTP error page can be customized with a CSS style sheet, but we do not intend to allow customization of the error page contents (hoststated is not a webserver!). ok pyr@
2007-11-20Allow overriding the global interval in a table.Pierre-Yves Ritschard
Table specific intervals must be multiples of the global interval. help and ok reyk@
2007-11-20another fix to handle "expect" and "filter" actions in the new styleReyk Floeter
correctly. ok pyr@
2007-11-20bump table name size.Pierre-Yves Ritschard
ok reyk@
2007-11-20spacingReyk Floeter
2007-11-20minor change to some relay log messagesReyk Floeter
2007-11-19spacingReyk Floeter
2007-11-19knf (replace some ';;' with a single ';')Reyk Floeter
2007-11-19rework the internal handling of protocol actions a little bit:Reyk Floeter
- allow to use a key for multiple times by appending a queue of additional matches to the tree node. for example, this allows to specify multiple "expect" or "filter" actions to white-/black-list a list of HTTP-headers, URLs, .. - prevent specifing an HTTP header for multiple times when using the expect action. - minor code shuffling
2007-11-19always enable "late connect" relay mode if an "expect" or "filter"Reyk Floeter
action has been specified for the protocol. late connect mode first reads the complete request (HTTP header) before opening the inbound connection instead of relaying it line-by-line.
2007-11-19move repeated code to cleanup a protocol tree into a function.Reyk Floeter
2007-11-15Do not insert proto_default inside the dynamically alloced protocol queue.Pierre-Yves Ritschard
Handle it as a special case in the one place where it actually matters instead.
2007-11-14reset global variables everytime we enter parse_config.Pierre-Yves Ritschard
2007-11-14do go through relays when none exist.Pierre-Yves Ritschard
2007-11-14add some sanity, that will be useful later on.Pierre-Yves Ritschard
2007-11-14make protos dynamic tooPierre-Yves Ritschard
2007-11-13relays are dynamic now.Pierre-Yves Ritschard