accel-ppp.git - High performance PPTP/L2TP/SSTP/PPPoE/IPoE server for Linux (mirror of https://github.com/accel-ppp/accel-ppp.git)

Age	Commit message (Collapse)	Author
2018-01-10	Merge branch 'master' of github.com:xebd/accel-ppp	Dmitry Kozlov

2018-01-10	Merge pull request #34 from themiron/sstp	xebd
	sstp: drop unnecessary ssl reinitialization
2018-01-10	sstp: drop unnecessary ssl reinitialization	Vladislav Grishenko

2018-01-10	Merge branch 'master' of ssh://git.code.sf.net/p/accel-ppp/code	Dmitry Kozlov

2018-01-10	Merge branch 'master' of github.com:xebd/accel-ppp	Dmitry Kozlov

2018-01-10	Merge pull request #31 from themiron/sstp	xebd
	sstp support
2018-01-09	ipoe: do not create ipoe interface with server's ifindex	Dmitry Kozlov

2018-01-07	Merge branch 'master' of /home/dima/git/accel-ppp	Dmitry Kozlov

2018-01-06	cmake: added CPACK_TYPE=Debian9	Dmitry Kozlov

2018-01-06	cmake: reworked debian related package generation rules	Dmitry Kozlov

2018-01-06	ipoe_mod: use least byte of hwaddr as hash key	Dmitry Kozlov

2018-01-06	sstp: reuse general logging framework	Vladislav Grishenko

2018-01-05	sstp: add man & readme records	Vladislav Grishenko

2018-01-05	sstp: possible sync ppp mode fix	Vladislav Grishenko

2018-01-05	sstp: fix default max mtu to fit standard 1500 media	Vladislav Grishenko

2018-01-05	ipoe: implemented ipv6 in shared mode	Dmitry Kozlov

2017-12-30	sstp: add generic base for parsing http header values, improve host-name ↵	Vladislav Grishenko
	checking
2017-12-30	sstp: log current SSL mode for reference	Vladislav Grishenko

2017-12-30	sstp: optimize SSL context & config reload handling	Vladislav Grishenko

2017-12-30	sstp: fix obsolete contexts leak	Vladislav Grishenko

2017-12-30	sstp: rework certificate load, fix build issue with some openssl version	Vladislav Grishenko

2017-12-30	sstp: fix va_start/va_end usage on x64 platforms	Vladislav Grishenko

2017-12-30	sstp: http: protect against oversized headers and improve parsing	Vladislav Grishenko

2017-12-30	sstp: implement HTTP host header and TLS SNI checking	Vladislav Grishenko

2017-12-30	sstp: drop ssl_mode_auto_retry, not required afer ↵	Vladislav Grishenko
	7945857927b4cedab365ba86934d771281eeb213
2017-12-30	sstp: use HTTP status code 510 for HTTP method errors	Vladislav Grishenko

2017-12-30	sstp: http: get rid of static reply buffer	Vladislav Grishenko

2017-12-30	sstp: fix eof result of ssl read/write ops although no harm was really happened	Vladislav Grishenko

2017-12-30	sstp: allow colons in cert-hash-* hex values	Vladislav Grishenko
	Simplify copy-pasting from openssl x509 -fingerprint output: Examples: openssl x509 -in cert.pem -noout -fingerprint -sha1 openssl x509 -in cert.pem -noout -fingerprint -sha256
2017-12-30	sstp: use ssl-keyfile option for certificate private key	Vladislav Grishenko
	if not set, fallback to private key in the same ssl-pemfile
2017-12-30	sstp: treat SSL errors as EIO	Vladislav Grishenko

2017-12-30	sstp: keep default ssl ciphers for better compatibility	Vladislav Grishenko

2017-12-30	sstp: allow to prefer server ciphers with ssl-prefer-server-ciphers option	Vladislav Grishenko

2017-12-30	sstp: implement Crypto Binding's Certificate hash & proto checking per 3.3.5.2.3	Vladislav Grishenko
	Warning: config options are changed aligned with general accel-ppp style. Following cases, including no-openssl build are supported: ssl \| ssl-pemfile \| behavior 1 set get both sha1 & sha256 from the certificate 0 set get both sha1 & sha256 from the certificate 0 unset use cert-hash-sha1 and/or cert-hash-sha256 hex options no-openssl use cert-hash-sha1 and/or cert-hash-sha256 hex options cert-hash-sha1 and/or cert-hash-sha256 hex options override certificate's, so it's possible to turn certficate hash verification off with just empty values (default).
2017-12-30	sstp: implement Crypto Binding attr & nonce checking per 3.3.5.2.3	Vladislav Grishenko

2017-12-30	sstp: fix thread crash on certificate-error diconnect	Vladislav Grishenko

2017-12-30	sstp: zero allocated packets, fix non-zero reserved fields	Vladislav Grishenko

2017-12-30	sstp: make sstp great again. simplify ssl handlers, fix crashes, move to ↵	Vladislav Grishenko
	async ppp TODO: accounting/statistics, minimize syscall & memory usage
2017-12-30	sstp: implement ifname option support	Vladislav Grishenko

2017-12-30	sstp: allow 3 nak replies per 3.3.5.2.2	Vladislav Grishenko

2017-12-30	sstp: implement preliminar sstp protocol support	Vladislav Grishenko

2017-12-29	ipv6: ignore "unspecified address" (::/128)	Dmitry Kozlov

2017-12-28	ipoe: check noauth option in [auth] section too	Dmitry Kozlov

2017-12-28	Merge pull request #30 from themiron/alloca-crash	xebd
	triton: fix crash due gcc mis-optimization of alloca()
2017-12-28	triton: fix crash due gcc mis-optimization of alloca()	Vladislav Grishenko
	since alloca() result is used indirectly, gcc 4.7.2 thinks the whole call can be dropped on any optimization level.
2017-12-27	ipoe,vlan_mon: updated up to kernel 4.14	Dmitry Kozlov

2017-12-27	ipoe: include server's mac into weight notify packet to be used as ↵	Dmitry Kozlov
	additional key when weights are equal
2017-12-27	ipoe: implemented new load balancing mechanism	Dmitry Kozlov
	new config options: [ipoe] weight=N - global weight interface=ethX,weight=N - per-interface weight How it works: On reception of DHCPDISCOVER accel-ppp sends broadcast DHCP message to port 67 with same xid and add special vendor-specific option where encodes its current session count multipled by weight. On reception of such message accel-ppp searches session with same xid and compares weight. If received weight is less than session's weight then it terminates this session. per-interface weight=0 has special meaning as backup (fail-over) interface, f.e. it terminates session on any received weight. By default weight based load balancing is disabled. To enable need to specify global or/and per-interface weight.
2017-12-27	triton: fixed bugs introduced by previous commit	Dmitry Kozlov

2017-12-26	shaper: install ifb filter for all protocols	Dmitry Kozlov