[acassen/keepalived] 0a691e: When adding ip(6)tables entries, only specify i/f ...

  Branch: refs/heads/master
  Home:   https://github.com/acassen/keepalived
  Commit: 0a691e515c1fc6a58f68803a2d8137526de44bb5
      https://github.com/acassen/keepalived/commit/0a691e515c1fc6a58f68803a2d8137526de44bb5
  Author: Quentin Armitage <[email protected]>
  Date:   2016-02-04 (Thu, 04 Feb 2016)

  Changed paths:
    M keepalived/vrrp/vrrp_ipaddress.c

  Log Message:
  -----------
  When adding ip(6)tables entries, only specify i/f for link_local addresses

Packets to/from global address could arrive or be sent on any interface,
so don't specify the interface for blocking the packets. For link local
addresses, the block must relate to the specific interface.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: d3463c27770a9bbbb909fd7a41a3e8f18d403f34
      https://github.com/acassen/keepalived/commit/d3463c27770a9bbbb909fd7a41a3e8f18d403f34
  Author: Quentin Armitage <[email protected]>
  Date:   2016-02-04 (Thu, 04 Feb 2016)

  Changed paths:
    M configure
    M configure.in
    M keepalived/include/ipvswrapper.h
    M keepalived/include/vrrp_if.h
    M keepalived/include/vrrp_ipaddress.h
    A keepalived/include/vrrp_iptables.h
    M keepalived/vrrp/Makefile.in
    M keepalived/vrrp/vrrp.c
    M keepalived/vrrp/vrrp_daemon.c
    M keepalived/vrrp/vrrp_ipaddress.c
    A keepalived/vrrp/vrrp_iptables.c

  Log Message:
  -----------
  Add ability to use libiptc rather than invoking ip(6)tables

Invoking ip(6)tables has a high overhead, since the process has to be
forked and exec'd, and then it has to read the whole ip(6)tables
filter chain before it makes a single update and commits it back.

Using libiptc avoids the overhead of multiple forks/execs, and also
means that multiple entries can be added/deleted to/from the ip(6)tables
configuration in a single update.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: 696e0084490b47f25ba134eb060e5645e04f92c9
      https://github.com/acassen/keepalived/commit/696e0084490b47f25ba134eb060e5645e04f92c9
  Author: Quentin Armitage <[email protected]>
  Date:   2016-02-04 (Thu, 04 Feb 2016)

  Changed paths:
    M configure
    M configure.in
    M doc/man/man5/keepalived.conf.5
    M keepalived/core/Makefile.in
    M keepalived/core/global_data.c
    M keepalived/core/global_parser.c
    M keepalived/include/global_data.h
    A keepalived/include/vrrp_ipset.h
    M keepalived/include/vrrp_iptables.h
    A keepalived/include/vrrp_iptables_calls.h
    M keepalived/vrrp/Makefile.in
    M keepalived/vrrp/vrrp.c
    M keepalived/vrrp/vrrp_daemon.c
    M keepalived/vrrp/vrrp_data.c
    M keepalived/vrrp/vrrp_ipaddress.c
    A keepalived/vrrp/vrrp_ipset.c
    M keepalived/vrrp/vrrp_iptables.c
    A keepalived/vrrp/vrrp_iptables_calls.c
    M keepalived/vrrp/vrrp_snmp.c
    M lib/utils.c
    M lib/utils.h

  Log Message:
  -----------
  Add option to use ipsets instead of iptables to block addresses

Instead of having lists of addresses in iptables, it is much more
efficient to use ipsets to handle those addresses, since that is
what it is designed for.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: 8c8e65305c46f2af5b98c045892c1e24a4c5f58e
      https://github.com/acassen/keepalived/commit/8c8e65305c46f2af5b98c045892c1e24a4c5f58e
  Author: Quentin Armitage <[email protected]>
  Date:   2016-02-04 (Thu, 04 Feb 2016)

  Changed paths:
    M keepalived/check/ipvswrapper.c

  Log Message:
  -----------
  Use /proc/sys/kernel/modprobe to find modprobe

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: 2013e936938d0cb22520f8c42cf461951e5aeda9
      https://github.com/acassen/keepalived/commit/2013e936938d0cb22520f8c42cf461951e5aeda9
  Author: Quentin Armitage <[email protected]>
  Date:   2016-02-04 (Thu, 04 Feb 2016)

  Changed paths:
    M keepalived/check/ipvswrapper.c

  Log Message:
  -----------
  Reinstate SIGCHLD before forking to exec modprobe for ip_vs

The fork of modprobe to load ip_vs would have reported a failure
even though it would have succeeded.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: a33ecb58cf84cd57a40a14ebc686c0ec0c98e337
      https://github.com/acassen/keepalived/commit/a33ecb58cf84cd57a40a14ebc686c0ec0c98e337
  Author: Quentin Armitage <[email protected]>
  Date:   2016-02-04 (Thu, 04 Feb 2016)

  Changed paths:
    M lib/signals.c
    M lib/signals.h
    M lib/utils.c

  Log Message:
  -----------
  Fix forking/execing re closing signal pipe

When calling scripts, we don't want to give them access to the signal
pipe used between the parent process and the vrrp process.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: fdc2d9f4babf5811766e46e6572ec10c6d91da5d
      https://github.com/acassen/keepalived/commit/fdc2d9f4babf5811766e46e6572ec10c6d91da5d
  Author: Alexandre Cassen <[email protected]>
  Date:   2016-02-04 (Thu, 04 Feb 2016)

  Changed paths:
    M configure
    M configure.in
    M doc/man/man5/keepalived.conf.5
    M keepalived/check/ipvswrapper.c
    M keepalived/core/Makefile.in
    M keepalived/core/global_data.c
    M keepalived/core/global_parser.c
    M keepalived/include/global_data.h
    M keepalived/include/ipvswrapper.h
    M keepalived/include/vrrp_if.h
    M keepalived/include/vrrp_ipaddress.h
    A keepalived/include/vrrp_ipset.h
    A keepalived/include/vrrp_iptables.h
    A keepalived/include/vrrp_iptables_calls.h
    M keepalived/vrrp/Makefile.in
    M keepalived/vrrp/vrrp.c
    M keepalived/vrrp/vrrp_daemon.c
    M keepalived/vrrp/vrrp_data.c
    M keepalived/vrrp/vrrp_ipaddress.c
    A keepalived/vrrp/vrrp_ipset.c
    A keepalived/vrrp/vrrp_iptables.c
    A keepalived/vrrp/vrrp_iptables_calls.c
    M keepalived/vrrp/vrrp_snmp.c
    M lib/signals.c
    M lib/signals.h
    M lib/utils.c
    M lib/utils.h

  Log Message:
  -----------
  Merge pull request #241 from pqarmitage/iptables2

Iptables2


Compare: https://github.com/acassen/keepalived/compare/a89f39321d62...fdc2d9f4babf

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140

_______________________________________________
Keepalived-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/keepalived-devel