| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | hoststated/hoststatectl get repository copied (and de-tagged) into |   deraadt | 2007-12-07 | 22 | -13315/+0 |
| | | | | | | | | relayd/relayctl. This is a more suitable place for a daemon that has grown out of it's initial roots of "monitoring and redirecting services at various layers", into one that is "a full featured proxy, which happens to know what is up/down" | ||||
| * | fix fd/ssl leak in hoststated ssl checks |   reyk | 2007-12-05 | 1 | -1/+2 |
| | | | | | From Przemyslaw Frasunek, closes PR 5671 | ||||
| * | bump the current file descriptor resource limit (openfiles-cur) to the | reyk | 2007-11-28 | 1 | -1/+15 |
| | | | | | | | | | | | maximum number of file descriptors for this login class (openfiles-max) of the relay child processes. this will allow 1024 instead of just 128 open file descriptors in the default configuration (class daemon), use the openfiles-max capability and the sysctl kern.maxfiles to adjust the value. ok gilles@ pyr@ | ||||
| * | typos | reyk | 2007-11-28 | 1 | -3/+3 |
| | | |||||
| * | unref the label when free'ing a protocol node | reyk | 2007-11-28 | 1 | -1/+3 |
| | | |||||
| * | allow to add labels to protocol actions, they will be printed in http | reyk | 2007-11-26 | 6 | -31/+253 |
| | | | | | | | error pages and can be used to refer to additional information. ok pyr@ | ||||
| * | "canonicalized hostname" instead of just "hostname" for the url action | reyk | 2007-11-25 | 1 | -3/+4 |
| | | |||||
| * | in addition to IPv4/6 addresses, canonicalize the hostname for "url", | reyk | 2007-11-25 | 1 | -5/+39 |
| | | | | | | | | for example ".www...Example.com." will be translated to "www.example.com". ok gilles@ | ||||
| * | new sentence, new line; |   jmc | 2007-11-24 | 1 | -2/+3 |
| | | |||||
| * | tweak for hostnames without dots (like "localhost") | reyk | 2007-11-24 | 1 | -1/+3 |
| | | |||||
| * | sort includes, adjust to style(9) | reyk | 2007-11-24 | 17 | -53/+53 |
| | | |||||
| * | extend the url lookup algorithm to match the full URL and different | reyk | 2007-11-24 | 4 | -20/+146 |
| | | | | | | | | possible suffix/prefix combinations by stripping subdomains, path components, and the query args. ok and tested by gilles@ | ||||
| * | fix goto to jump to the right place | reyk | 2007-11-24 | 1 | -2/+2 |
| | | |||||
| * | - use either "host name" or "hostname", i decided to use "hostname" everywhere | reyk | 2007-11-23 | 1 | -5/+5 |
| | | | | | | | - a URL instead of an URL (a "you-are-el") suggested by jmc@ | ||||
| * | re-implement the "mark" action and document it in the manpage: | reyk | 2007-11-23 | 4 | -43/+108 |
| | | | | | | | | | | it is possible to attach a mark to a session based on matching an entity (header, url, cookie, ...) and add conditional action for this mark. it works a bit like the tag/tagged keywords in pf, but i decided to pick a different name to avoid confusion. ok pyr@ gilles@ | ||||
| * | add cvs id |   sthen | 2007-11-23 | 1 | -0/+2 |
| | | | | | ok pyr@ | ||||
| * | fix typo | sthen | 2007-11-23 | 1 | -2/+2 |
| | | | | | ok pyr@ | ||||
| * | shuffle some structure elements; avoid using enums in *_config structs. | reyk | 2007-11-22 | 1 | -3/+3 |
| | | |||||
| * | Fix relay roundrobin mode to work correctly when multiple hosts in a | reyk | 2007-11-22 | 2 | -3/+7 |
| | | | | | | | | table are down. Thanks to Preston Norvell at serialssolutions dot com for reporting the problem. | ||||
| * | add (new) "url" protocol action, this can be used to match/filter URL | reyk | 2007-11-22 | 4 | -10/+162 |
| | | | | | | | suffix/prefix expressions like "example.com/index.html?args". a digest mode allows to match against anonymized SHA1/MD5 digests of suffix/prefix expressions. | ||||
| * | move HTTP cookie and query lookup code from the into separate functions | reyk | 2007-11-21 | 1 | -93/+120 |
| | | | | | (the if () else if () block was getting very big). | ||||
| * | spacing | reyk | 2007-11-21 | 2 | -9/+9 |
| | | |||||
| * | extend action grammar with "filter value" and "expect value" as a | reyk | 2007-11-21 | 2 | -5/+49 |
| | | | | | short form for "filter * from value" or "expect * from value". | ||||
| * | move digest string handling into an extra function. | reyk | 2007-11-21 | 4 | -34/+56 |
| | | |||||
| * | fix the tree comparison function. it turned out that it could fail | reyk | 2007-11-21 | 1 | -3/+6 |
| | | | | | with large trees of protocol actions. | ||||
| * | tweak previous; | jmc | 2007-11-21 | 1 | -4/+4 |
| | | |||||
| * | rename the "url" filter action to "query" to use the correct term. | reyk | 2007-11-21 | 4 | -20/+36 |
| | | | | | | | | please update your hoststated.conf configurations. also add more examples to the manpage. alright pyr@ | ||||
| * | allow the http digest type to be either SHA1 or MD5 determined by the | reyk | 2007-11-21 | 4 | -12/+39 |
| | | | | | | | | digest string length; it is compatible to any existing SHA1-only configurations. ok pyr@ gilles@ | ||||
| * | more work on the "filter" action: close the connection instantly when | reyk | 2007-11-21 | 1 | -4/+15 |
| | | | | | receiving a filtered entity, fix some remaining issues. | ||||
| * | document the fact that port can be specified in table statements inside |   pyr | 2007-11-21 | 1 | -3/+7 |
| | | | | | | service sections. ok reyk@ | ||||
| * | make sure all hosts are checked when hoststatectl poll is issued, now | pyr | 2007-11-21 | 1 | -1/+3 |
| | | | | | | that check interval can differ from table to table. ok reyk@ | ||||
| * | tweak previous; | jmc | 2007-11-20 | 1 | -2/+2 |
| | | |||||
| * | limit the number of displayed lines per node in relay_protodebug(). | reyk | 2007-11-20 | 1 | -2/+12 |
| | | |||||
| * | allow to use the "include" directive in tables, services, relays, and | reyk | 2007-11-20 | 1 | -1/+5 |
| | | | | | | | protocols. ok pyr@ | ||||
| * | it may be desirable to send a HTTP error page with error code and a | reyk | 2007-11-20 | 6 | -20/+217 |
| | | | | | | | | | | | | | | meaningful message if a HTTP/HTTPS relay closes the connection for some reason. for example, a "403 Forbidden" if the request was rejected by a filter. this will be enabled with the "return error" option and is disabled by default, the standard behaviour is to silently drop the connection; the browser may display an empty page in this case. the look+feel of the HTTP error page can be customized with a CSS style sheet, but we do not intend to allow customization of the error page contents (hoststated is not a webserver!). ok pyr@ | ||||
| * | Allow overriding the global interval in a table. | pyr | 2007-11-20 | 4 | -5/+25 |
| | | | | | | Table specific intervals must be multiples of the global interval. help and ok reyk@ | ||||
| * | another fix to handle "expect" and "filter" actions in the new style | reyk | 2007-11-20 | 1 | -9/+8 |
| | | | | | | | correctly. ok pyr@ | ||||
| * | bump table name size. | pyr | 2007-11-20 | 1 | -2/+2 |
| | | | | | ok reyk@ | ||||
| * | spacing | reyk | 2007-11-20 | 1 | -3/+1 |
| | | |||||
| * | minor change to some relay log messages | reyk | 2007-11-20 | 1 | -6/+6 |
| | | |||||
| * | spacing | reyk | 2007-11-19 | 7 | -27/+28 |
| | | |||||
| * | knf (replace some ';;' with a single ';') | reyk | 2007-11-19 | 2 | -6/+6 |
| | | |||||
| * | rework the internal handling of protocol actions a little bit: | reyk | 2007-11-19 | 4 | -171/+247 |
| | | | | | | | | | | | | | - allow to use a key for multiple times by appending a queue of additional matches to the tree node. for example, this allows to specify multiple "expect" or "filter" actions to white-/black-list a list of HTTP-headers, URLs, .. - prevent specifing an HTTP header for multiple times when using the expect action. - minor code shuffling | ||||
| * | always enable "late connect" relay mode if an "expect" or "filter" | reyk | 2007-11-19 | 1 | -1/+3 |
| | | | | | | | action has been specified for the protocol. late connect mode first reads the complete request (HTTP header) before opening the inbound connection instead of relaying it line-by-line. | ||||
| * | move repeated code to cleanup a protocol tree into a function. | reyk | 2007-11-19 | 1 | -22/+19 |
| | | |||||
| * | Do not insert proto_default inside the dynamically alloced protocol queue. | pyr | 2007-11-15 | 3 | -10/+16 |
| | | | | | | Handle it as a special case in the one place where it actually matters instead. | ||||
| * | reset global variables everytime we enter parse_config. | pyr | 2007-11-14 | 1 | -1/+7 |
| | | |||||
| * | do go through relays when none exist. | pyr | 2007-11-14 | 1 | -2/+7 |
| | | |||||
| * | add some sanity, that will be useful later on. | pyr | 2007-11-14 | 1 | -2/+6 |
| | | |||||
| * | make protos dynamic too | pyr | 2007-11-14 | 3 | -13/+15 |
| | | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |