| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
relayd/relayctl. This is a more suitable place for a daemon that has
grown out of it's initial roots of "monitoring and redirecting services
at various layers", into one that is "a full featured proxy, which
happens to know what is up/down"
|
| |
|
| |
|
|
|
|
|
| |
Handle it as a special case in the one place where it actually matters
instead.
|
| |
|
| |
|
|
|
|
|
| |
This syncs it with other hoststated entities and will make reload easier.
This is step 1 out of 7 for reload.
|
|
|
|
|
| |
Especially useful when interval is rather long.
I was supposed to commit this before 4.2.
|
| |
|
|
|
|
|
| |
from being used by several services.
``looks fine'' reyk@
|
| |
|
|
|
|
|
| |
libevent just to ignore it, use SIG_IGN instead.
this syncs hoststated with bgpd and (soon) ospfd.
|
|
|
|
|
|
|
|
| |
of our socket pairs. Instead disable listening on the pipe, terminate the
event loop, and let the parent process's SIGCHLD handler do a clean
shutdown.
from an ospfd diff by claudio, ok claudio@
|
|
|
|
|
|
| |
needed for layer 7 reload support.
ok pyr@
|
|
|
|
|
|
| |
Hoststated can be reloaded either by sending SIGHUP to the parent process
or by using ``hoststatectl reload''
discussed and ok reyk@
|
| |
|
| |
|
|
|
|
|
| |
split the code to start the event loop in two functions.
introduce merge_config which will be used later on.
|
|
|
|
| |
than one message.
|
|
|
|
| |
forward IMSG_CTL_RELOAD which ends up not doing anything for now.
|
|
|
|
|
|
|
|
| |
allow purging of parts of the hoststated environment structure.
start using this function now to only keep vital information in
hoststated children processes.
ok reyk@
|
|
|
|
|
|
|
|
|
|
| |
First split out hosts, tables and services into to structs, one that
contains the runtime fields and one (inside the runtime) that contains
mostly static fields that will be sent over the socket during reload.
Also move the demoted field of tables inside the flags field as its
just a boolean.
ok reyk@
|
|
|
|
|
|
|
| |
* make parse_config allocate the hoststated function by itself
* make as many sockets as necessary to talk to the relay children
* add send_all for talking to all children
with advise and ok reyk@
|
|
|
|
|
| |
spotted by Ching-Feng Wang <cfw at telepaq.com>.
ok reyk@
|
|
|
|
|
|
|
|
| |
which prevented the pfe to accept statistics updates and natlookups
from any other process then the first one. in other words, this will
show you the total relay statistics off _all_ preforked processes
(hoststatectl show relays) and it will unbreak the natlookup mode with
more than one running relay process.
|
|
|
|
|
|
|
|
| |
layer 7 loadbalancing.
- allow to run relays with tables without depending on services
- show hosts and tables assigned to relays in hoststatectl show commands
ok pyr@ deraadt@ with some input from mcbride@
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
loadbalancing, SSL acceleration, general-purpose TCP relaying, and
transparent proxying.
see hoststated.conf(5) and my upcoming article on undeadly.org for
details.
ok to commit deraadt@ pyr@
|
|
|
|
|
|
|
| |
any truncated strings (table names/anchors/tags/...) to pf and the
kernel.
ok pyr@
|
|
|
|
| |
ok reyk@
|
|
|
|
| |
ok reyk@
|
|
|
|
| |
ok reyk@
|
|
|
|
|
| |
hoststated.
ok reyk@, "looks nice and clean" niallo@
|
|
|
|
|
| |
with help and OK reyk@
with help and advice by claudio@ and Srebrenko Sehic
|
|
|
|
| |
a nice exit in case one of the processes dies. OK pyr@
|
|
|
|
|
|
| |
Note to testers: the user the daemon changes its id to is now _hoststated,
don't forget to update master.passwd.
ok reyk@
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
and we don't know about all the possible security problems.
change the check send/expect code to use the fnmatch(3) interface
using shell globbing rules instead. this allows simple patterns like
"220 * ESMTP*" or "SSH-[12].??-*".
suggested by deraadt@ and otto@
ok Pierre-Yves Ritschard (pyr at spootnik dot org)
|
|
|
|
|
|
|
| |
regex(3)). this allows to define additional checks for other TCP
protocols.
From Pierre-Yves Ritschard (pyr at spootnik dot org)
|
|
|
|
|
|
|
| |
- minor change of the "hostatectl show" command output
- increase the max service and tag names (max pf tag name size is 64 now!)
thanks to pyr who found a bug in my initial diff
|
|
|
|
|
|
| |
please note that some editors will replace tabs with multiple spaces
if you cut & paste code from other sections. please try to keep the
tabs ;).
|
|
remote hosts and dynamically alter pf(4) tables and redirection rules
for active server load balancing. The daemon has been written by
Pierre-Yves Ritschard (pyr at spootnik.org) and was formerly known as
"slbd".
The daemon is fully functional but it still needs some work and
cleanup so we don't link it to the build yet. Some TODOs are a
partial rewrite of the check_* routines (use libevent whenever we
can), improvement of the manpages, and general knf and cleanup.
ok deraadt@ claudio@
|