| Age | Commit message (Collapse) | Author |
|---|
|
they can be expressed as one with shorter prefixlen. if so, adjust the
first prefix accordingly and return 1 so the second gets removed.
shrinks the ruleset for my AS from 19533 to 16892 rules.
|
|
|
|
that the resulting rule allows more specifics. i. e.
10.0.0.0/16, 10.0.1/24, 10.0.128/17 -> prefix 10.0.0.0/16 prefixlen <= 24
implementation: sort prefixes per AS by address family, prefix, prefixlen.
for every entry, check wether the prefix with the previous entry's mask
applied matches the previous entry's prefix & mask. Only move the previous
pointer forward if not so. Fill the holes we create in the process on the
fly; shrink the array afterwards.
shrinks the generated filters for our AS from over 100k to under 20k lines.
|
|
hanging connection for a specific query (which works find against radb,
investigating with ripe pplz), and ripe doesn't mirror some important RRs
like ALTDB.
|
|
since we have a tristate in relay_handle_http(), use nicer return
codes defined to make it better readble (no function change).
|
|
multiple route objects (i. e. is the result of maksing out longer prefixes
or aggregation we'll do later).
if maxlen is > prefixlen, generate rules accordingly (prefixlen <= maxlen)
|
|
|
|
|
|
|
|
discussed with pyr
|
|
|
|
|
|
members
|
|
stolen from hostapd.conf.5
|
|
|
|
"" instead of defaulting to NULL, which is a pain to handle afterwards.
in the output function, treat empty string address like NULL address
problem noticed by rivo nurges <rix@estpak.ee>
|
|
to us trying to add an empty-string AS, which asset_get later complains
about.
in parse_asset, check that we're no dealing with a empty string token
before calling asset_addmember
|
|
|
|
RPSL spec and enforced by the IRR databases.
teach asset_get this fact. only send queries for the as-set members for
as-sets.
since we now always fake an as-set for aut-nums, we don't need to
escape the recursive as-set resolution process when we run into aut-num
members.
complain about and then ignore unresolvable as-set members.
|
|
for object found with n matched attributes. this way we can distinguish
between no object found and object without relevant attributes
|
|
|
|
|
|
|
|
|
|
generates bgpd filter rules from the Internet Routing Registry aka IRR aka
the aut-num, as-set and route objects in the RIPE, ARIN, APNIC ... databases
accessed via whois, using the Routing Policy Specificaion Language RPSL.
implement the whois query interface, an RPSL parser (of course only the
parts we need), recursive as-set resolver, prefixes per AS lookup,
and an ouput module to make up the rules.
work in progress, not ready for general consumption yet.
import agreed by theo & claudio
|
|
|
|
the code here is slightly different, but also has the overfow in both cases
|
|
input buffer, we call the new callback to handle the remaining data.
this change makes sure that we only do this after the read callback
was actually changed (read header -> read content, read content ->
read header, read chunks...) to avoid a possible loop which could
happen in some rare cases.
|
|
OK millert@.
|
|
routines.
OK millert@.
|
|
|
|
after release we should revisit this issue, we can probably safely shrink
the max imsg size.
Valentin Kozamernik in PR5401
|
|
if a sensor is always bad, but sometimes goes OK for only a few seconds,
we want to ignore that bogus change as well
also fix setting if last_val.
from Constantine, ok mickey
|
|
|
|
|
|
|
|
|
|
|
|
deraadt@
|
|
actions on response headers (the reply sent by backend HTTP servers).
the default and slightly faster relay streaming mode will be used if
no actions are defined.
for example:
response change "Server" to "OpenBSD-hoststated/4.1"
ok pyr@
|
|
from Tamas TEVESZ
|
|
|
|
OK beck@
|
|
another heads up for testers: you need to change configuration files.
ok reyk@
|
|
reorder other rules as well.
ok reyk@
|
|
different gcc versions (it previously broke the tree on sparc with gcc
2.95 when compiling sys/hash.h).
-Werror removal suggested by deraadt@
|
|
keyword for default relay actions.
ok pyr@
|
|
configuration will need to be updated as some directives have changed.
manpage and examples bits coming up.
ok reyk@
|
|
|
|
|
