[acassen/keepalived] 3f827d: Add vrrp_iptables global configuration option

  Branch: refs/heads/master
  Home:   https://github.com/acassen/keepalived
  Commit: 3f827df43b12a97d166e4f080927378f3245b58c
      https://github.com/acassen/keepalived/commit/3f827df43b12a97d166e4f080927378f3245b58c
  Author: Quentin Armitage <[email protected]>
  Date:   2016-01-26 (Tue, 26 Jan 2016)

  Changed paths:
    M configure
    M configure.in
    M doc/man/man5/keepalived.conf.5
    M keepalived/core/global_data.c
    M keepalived/core/global_parser.c
    M keepalived/include/global_data.h
    M keepalived/vrrp/vrrp_ipaddress.c

  Log Message:
  -----------
  Add vrrp_iptables global configuration option

The iptables/ip6tables entries were always added at the end of the
INPUT chain, but for many configurations this is too late in the
processing. This patch allows the chain name to which rules are
added to be specified, and also allows the option of specifying
no rules are to be added.

If a chain name is specifed, it is necessary for that chain to
already exist in the iptables and/or ip6tables config, and for
that chain to be called from an appropriate point in the
ip(6)tables configuration.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: 334b16e9481d3c38f383eee1382e4b141dc6ed02
      https://github.com/acassen/keepalived/commit/334b16e9481d3c38f383eee1382e4b141dc6ed02
  Author: Quentin Armitage <[email protected]>
  Date:   2016-01-26 (Tue, 26 Jan 2016)

  Changed paths:
    M doc/keepalived.conf.SYNOPSIS
    M doc/man/man5/keepalived.conf.5
    M keepalived/core/global_data.c
    M keepalived/core/global_parser.c
    M keepalived/include/global_data.h
    M keepalived/vrrp/vrrp_ipaddress.c

  Log Message:
  -----------
  Add option to block outbound traffic from VIPs

Unwanted traffic to VIPs is discarded by ip(6)tables. This adds
an option to also block outgoing traffic from VIPs.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: 03b46b408a4751c96727597cd0121fbc6b1bd6c4
      https://github.com/acassen/keepalived/commit/03b46b408a4751c96727597cd0121fbc6b1bd6c4
  Author: Quentin Armitage <[email protected]>
  Date:   2016-01-26 (Tue, 26 Jan 2016)

  Changed paths:
    M keepalived/vrrp/vrrp.c

  Log Message:
  -----------
  Add iptables blocks for E-VIPs just like VIPs

Commit 7ec7c8d added blocking traffic to VIPs when not in accept
mode. This patch adds blocking for E-VIPs, since the only
difference between VIPs and E-VIPs should be whether they are
advertised or not.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: df80acb9bbabb99c97602bdcd0ee7a6bd82b342f
      https://github.com/acassen/keepalived/commit/df80acb9bbabb99c97602bdcd0ee7a6bd82b342f
  Author: Quentin Armitage <[email protected]>
  Date:   2016-01-27 (Wed, 27 Jan 2016)

  Log Message:
  -----------
  Merge remote-tracking branch 'upstream/master' into iptables


  Commit: 73bc4275e07a88cecc02c1557f784ee442464afa
      https://github.com/acassen/keepalived/commit/73bc4275e07a88cecc02c1557f784ee442464afa
  Author: Alexandre Cassen <[email protected]>
  Date:   2016-01-28 (Thu, 28 Jan 2016)

  Changed paths:
    M configure
    M configure.in
    M doc/keepalived.conf.SYNOPSIS
    M doc/man/man5/keepalived.conf.5
    M keepalived/core/global_data.c
    M keepalived/core/global_parser.c
    M keepalived/include/global_data.h
    M keepalived/vrrp/vrrp.c
    M keepalived/vrrp/vrrp_ipaddress.c

  Log Message:
  -----------
  Merge pull request #224 from pqarmitage/iptables

iptables - request #3


Compare: https://github.com/acassen/keepalived/compare/29840d59121a...73bc4275e07a

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140

_______________________________________________
Keepalived-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/keepalived-devel