[acassen/keepalived] be0742: Add no_accept mode for VRRPv2 and standardise VRRP...

  Branch: refs/heads/master
  Home:   https://github.com/acassen/keepalived
  Commit: be07426d63e3d2252365660e59ef737d4509c3b7
      https://github.com/acassen/keepalived/commit/be07426d63e3d2252365660e59ef737d4509c3b7
  Author: Quentin Armitage <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Changed paths:
    M doc/keepalived.conf.SYNOPSIS
    M doc/man/man5/keepalived.conf.5
    M keepalived/vrrp/vrrp.c
    M keepalived/vrrp/vrrp_data.c
    M keepalived/vrrp/vrrp_parser.c

  Log Message:
  -----------
  Add no_accept mode for VRRPv2 and standardise VRRPv3 with it

RFC3768, for VRRPv2, specifies that packets addressed to the VIPs
should not be accepted, unless the router is the address owner.

This commit implements not accepting the packets when running VRRPv2,
but only if no_accept is specified, or running in strict mode. The reason
for not making no_accept the default (which would confirm to the RFCs) is
that if running IPVS, or any other service on top of the VIPs, we need to
be able to accept the packets, and requiring everyone to specify accept
in that case would not be reasonable.

Prior to this commit, VRRPv3 was blocking packets sent to VIPs (and eVIPS),
unless the vrrp instance was the address owner, or accept mode was set. This
commit changes the default behaviour for VRRPv3 to make it consistent with
VRRPv2 (i.e. either strict mode or no_accept needs to be specified to be
conformant with RFC5978).

Signed-off-by: Quentin Armitage <[email protected]>


  Commit: b1303887f66f6aee1cb568f51ce8fe87094f9e13
      https://github.com/acassen/keepalived/commit/b1303887f66f6aee1cb568f51ce8fe87094f9e13
  Author: Alexandre Cassen <[email protected]>
  Date:   2016-10-04 (Tue, 04 Oct 2016)

  Changed paths:
    M doc/keepalived.conf.SYNOPSIS
    M doc/man/man5/keepalived.conf.5
    M keepalived/vrrp/vrrp.c
    M keepalived/vrrp/vrrp_data.c
    M keepalived/vrrp/vrrp_parser.c

  Log Message:
  -----------
  Merge pull request #440 from pqarmitage/fixes

Add no_accept mode for VRRPv2 and standardise VRRPv3 with it


Compare: https://github.com/acassen/keepalived/compare/43932c5fe8ba...b1303887f66f

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Keepalived-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/keepalived-devel