[acassen/keepalived] 5e490e: Implement not accepting packets to VIPs for VRRPv2

  Branch: refs/heads/master
  Home:   https://github.com/acassen/keepalived
  Commit: 5e490e9560de9715cd195371bf466692e3e1e43e
      https://github.com/acassen/keepalived/commit/5e490e9560de9715cd195371bf466692e3e1e43e
  Author: Quentin Armitage <[email protected]>
  Date:   2016-09-30 (Fri, 30 Sep 2016)

  Changed paths:
    M doc/keepalived.conf.SYNOPSIS
    M doc/man/man5/keepalived.conf.5
    M keepalived/vrrp/vrrp.c

  Log Message:
  -----------
  Implement not accepting packets to VIPs for VRRPv2

VRRPv3 was blocking packets sent to VIPs (and eVIPS), unless the
vrrp instance was the address owner, or accept mode was set.

RFC3768, for VRRPv2, specifies that packets addressed to the VIPs
should not be accepted, unless the router is the address owner. This
commit implements not accepting the packets when running VRRPv2, but
also adds an accept mode, to allow the packets to be received, unless
strict mode is set.

This commit alters the default behaviour of keepalived, by, by default,
not accepting packets to VIPs when using VRRPv2.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: 6c4761147d77c1374fcb62238758fa64e4501bc1
      https://github.com/acassen/keepalived/commit/6c4761147d77c1374fcb62238758fa64e4501bc1
  Author: Quentin Armitage <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Changed paths:
    M doc/keepalived.conf.SYNOPSIS
    M doc/man/man5/keepalived.conf.5
    M keepalived/vrrp/vrrp.c

  Log Message:
  -----------
  Revert "Implement not accepting packets to VIPs for VRRPv2"

This reverts commit 5e490e9560de9715cd195371bf466692e3e1e43e.


  Commit: d6c263d376fe57735ae668fa0069e75ed93aa69c
      https://github.com/acassen/keepalived/commit/d6c263d376fe57735ae668fa0069e75ed93aa69c
  Author: Quentin Armitage <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Changed paths:
    M keepalived/core/global_parser.c
    M keepalived/core/main.c
    M keepalived/core/namespaces.c
    M keepalived/include/main.h
    M keepalived/include/namespaces.h
    M keepalived/vrrp/vrrp_dbus.c
    M keepalived/vrrp/vrrp_ipset.c

  Log Message:
  -----------
  Don't use ipsets with namespaces on Linux < 3.13 by default

On Linux prior to version 3.13, ipsets were not network namespace
aware, so by default the use if ipsets is disabled if keepalived
is running in a network namespace. Configuration keyword
'namespace_with_ipsets' enables ipset use with a network namespace
on these older kernels.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: 46121a8b7e4af439c5ad9e4589fb80d414e0eefc
      https://github.com/acassen/keepalived/commit/46121a8b7e4af439c5ad9e4589fb80d414e0eefc
  Author: Quentin Armitage <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Changed paths:
    M lib/scheduler.c

  Log Message:
  -----------
  Fix reporting of script exit status

Issue #438 identified that the exit status of a script was not being
reported correctly.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: b25ae9ca85f1057af62719b9a3cc101424f26bc9
      https://github.com/acassen/keepalived/commit/b25ae9ca85f1057af62719b9a3cc101424f26bc9
  Author: Quentin Armitage <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Changed paths:
    M doc/keepalived.conf.SYNOPSIS
    M doc/man/man5/keepalived.conf.5
    M keepalived/core/global_parser.c

  Log Message:
  -----------
  Update documentation and fix compiler warning re ipset with Linux < 3.13

Commit d6c263d added a new keyword namespace_with_ipsets. This commit
updates the documentation, and fixes a compiler warning.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: ca955a7c1a6af324428ff04e24be68a180be127f
      https://github.com/acassen/keepalived/commit/ca955a7c1a6af324428ff04e24be68a180be127f
  Author: Quentin Armitage <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Changed paths:
    M keepalived/core/main.c
    M lib/scheduler.c
    M lib/scheduler.h

  Log Message:
  -----------
  Make report_child_status() check for vrrp and checker child processes

report_child_status() checks for exit status KEEPALIVED_EXIT_FATAL
and KEEPALIVED_EXIT_CONFIG, but these are only relevant for the vrrp
and checker child processes, and not for track scripts etc. This commit
adds a check that the terminating process is the vrrp or checker process
before checking those exit statuses.

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: da1823771e791b265a5f8b622c22ce3563b2b0b1
      https://github.com/acassen/keepalived/commit/da1823771e791b265a5f8b622c22ce3563b2b0b1
  Author: Quentin Armitage <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Log Message:
  -----------
  Merge branch 'master' into fixes


  Commit: 43932c5fe8ba5a6e296da244d4ed5edc44950ed6
      https://github.com/acassen/keepalived/commit/43932c5fe8ba5a6e296da244d4ed5edc44950ed6
  Author: pqarmitage <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Changed paths:
    M doc/keepalived.conf.SYNOPSIS
    M doc/man/man5/keepalived.conf.5
    M keepalived/core/global_parser.c
    M keepalived/core/main.c
    M keepalived/core/namespaces.c
    M keepalived/include/main.h
    M keepalived/include/namespaces.h
    M keepalived/vrrp/vrrp_dbus.c
    M keepalived/vrrp/vrrp_ipset.c
    M lib/scheduler.c
    M lib/scheduler.h

  Log Message:
  -----------
  Merge pull request #439 from pqarmitage/fixes

Minor fixes re child exist status, and ipsets with namespaces and Linux < 3.13


Compare: https://github.com/acassen/keepalived/compare/447fea5be1e4...43932c5fe8ba

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Keepalived-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/keepalived-devel