accel-ppp.git - High performance PPTP/L2TP/SSTP/PPPoE/IPoE server for Linux (mirror of https://github.com/accel-ppp/accel-ppp.git)

Age	Commit message (Collapse)	Author
2017-12-30	sstp: fix eof result of ssl read/write ops although no harm was really happened	Vladislav Grishenko

2017-12-30	sstp: allow colons in cert-hash-* hex values	Vladislav Grishenko
	Simplify copy-pasting from openssl x509 -fingerprint output: Examples: openssl x509 -in cert.pem -noout -fingerprint -sha1 openssl x509 -in cert.pem -noout -fingerprint -sha256
2017-12-30	sstp: use ssl-keyfile option for certificate private key	Vladislav Grishenko
	if not set, fallback to private key in the same ssl-pemfile
2017-12-30	sstp: treat SSL errors as EIO	Vladislav Grishenko

2017-12-30	sstp: keep default ssl ciphers for better compatibility	Vladislav Grishenko

2017-12-30	sstp: allow to prefer server ciphers with ssl-prefer-server-ciphers option	Vladislav Grishenko

2017-12-30	sstp: implement Crypto Binding's Certificate hash & proto checking per 3.3.5.2.3	Vladislav Grishenko
	Warning: config options are changed aligned with general accel-ppp style. Following cases, including no-openssl build are supported: ssl \| ssl-pemfile \| behavior 1 set get both sha1 & sha256 from the certificate 0 set get both sha1 & sha256 from the certificate 0 unset use cert-hash-sha1 and/or cert-hash-sha256 hex options no-openssl use cert-hash-sha1 and/or cert-hash-sha256 hex options cert-hash-sha1 and/or cert-hash-sha256 hex options override certificate's, so it's possible to turn certficate hash verification off with just empty values (default).
2017-12-30	sstp: implement Crypto Binding attr & nonce checking per 3.3.5.2.3	Vladislav Grishenko

2017-12-30	sstp: fix thread crash on certificate-error diconnect	Vladislav Grishenko

2017-12-30	sstp: zero allocated packets, fix non-zero reserved fields	Vladislav Grishenko

2017-12-30	sstp: make sstp great again. simplify ssl handlers, fix crashes, move to ↵	Vladislav Grishenko
	async ppp TODO: accounting/statistics, minimize syscall & memory usage
2017-12-30	sstp: implement ifname option support	Vladislav Grishenko

2017-12-30	sstp: allow 3 nak replies per 3.3.5.2.2	Vladislav Grishenko

2017-12-30	sstp: implement preliminar sstp protocol support	Vladislav Grishenko

2017-12-29	ipv6: ignore "unspecified address" (::/128)	Dmitry Kozlov

2017-12-28	ipoe: check noauth option in [auth] section too	Dmitry Kozlov

2017-12-28	Merge pull request #30 from themiron/alloca-crash	xebd
	triton: fix crash due gcc mis-optimization of alloca()
2017-12-28	triton: fix crash due gcc mis-optimization of alloca()	Vladislav Grishenko
	since alloca() result is used indirectly, gcc 4.7.2 thinks the whole call can be dropped on any optimization level.
2017-12-27	ipoe,vlan_mon: updated up to kernel 4.14	Dmitry Kozlov

2017-12-27	ipoe: include server's mac into weight notify packet to be used as ↵	Dmitry Kozlov
	additional key when weights are equal
2017-12-27	ipoe: implemented new load balancing mechanism	Dmitry Kozlov
	new config options: [ipoe] weight=N - global weight interface=ethX,weight=N - per-interface weight How it works: On reception of DHCPDISCOVER accel-ppp sends broadcast DHCP message to port 67 with same xid and add special vendor-specific option where encodes its current session count multipled by weight. On reception of such message accel-ppp searches session with same xid and compares weight. If received weight is less than session's weight then it terminates this session. per-interface weight=0 has special meaning as backup (fail-over) interface, f.e. it terminates session on any received weight. By default weight based load balancing is disabled. To enable need to specify global or/and per-interface weight.
2017-12-27	triton: fixed bugs introduced by previous commit	Dmitry Kozlov

2017-12-26	shaper: install ifb filter for all protocols	Dmitry Kozlov

2017-12-26	move version message to top	Dmitry Kozlov

2017-12-26	get rid of deprecated readdir_r	Dmitry Kozlov

2017-12-26	reworked context priorities	Dmitry Kozlov
	Introduced 4 priorities: 0 - management (cli) 1 - starting sessions (default priority) 2 - active sessions 3 - finishing sessions
2017-12-26	shaper: install skbedit filter for all protocols	Dmitry Kozlov

2017-12-25	ipv6: implemented special handling of /128 prefixes	Dmitry Kozlov
	If prefix length is 128 then send RA with 64 prefix length and add point-to-point ipv6 address on interface
2017-12-25	ipv6pool: added gw-ip6-address option and special handling for /128 prefixes	Dmitry Kozlov
	If pool specified with /128 prefix length, then initialize intf_id by gw_ip6_address and peer_intf_id by generated pool address.
2017-12-25	libnetlink: added ip6addr_add_peer function	Dmitry Kozlov

2017-12-21	radius: allocate memory for string attributes	Dmitry Kozlov

2017-12-20	shaper: define UINT16_MAX if not set	Dmitry Kozlov

2017-12-20	ippool: fixed parsing /32 ranges	Dmitry Kozlov

2017-12-19	ipoe: arp: do not reply on requests from 0.0.0.0	Dmitry Kozlov

2017-12-19	ipoe: fixed memory leak	Dmitry Kozlov

2017-12-15	ipoe: rename HASH_BITS -> IPOE_HASH_BITS	Dmitry Kozlov

2017-12-15	ipoe,vlan_mon: define RHEL_MAJOR=0 if not set	Dmitry Kozlov

2017-12-15	cmake: added centos support	Dmitry Kozlov

2017-12-15	ipoe, vlan_mon: implemented support for centos 3.10 kernel	Dmitry Kozlov

2017-12-14	Merge pull request #27 from themiron/ppp-ifname	xebd
	ppp: fix interface rename if kernel returns not zero, but picked index
2017-12-14	ppp: fix interface wildcard rename if kernel returns not zero, but picked index	Vladislav Grishenko

2017-12-14	ippool: implemented next pool support	Dmitry Kozlov
	config changes: [ip-pool] x.x.x.x/mask,name=pool1 y.y.y.y/mask,name=pool2,next=pool1
2017-12-14	radius: fixed memory leak	Dmitry Kozlov

2017-12-07	pppd_compat: mark session started if ip-up handler called	Dmitry Kozlov

2017-12-07	pppd_compat: fixed bug caused fork queue to stall	Dmitry Kozlov

2017-12-07	cmake: set INSTALL_RPATH for radius module	Dmitry Kozlov

2017-12-07	Merge pull request #26 from themiron/chap-ippool	xebd
	chap-secrets: add pool name support
2017-12-07	chap-secrets: assume 4th field as pool name	Vladislav Grishenko
	Simplify previous commit, if 4th field isn't empty and doesn't start with reserved chars (*-!), assume it as pool name. Also, fix build warn without OPENSSL.
2017-12-06	Merge pull request #25 from themiron/ppp-ifname	xebd
	ppp: implement per-ctrl ppp interface rename support
2017-12-06	chap-secrets: allow to use pool name instead of address to specify ipv4 pool	Vladislav Grishenko
	Chap-secrets' ipdb uses 4th field as static peer ipv4 address. With no radius and multiple same username sessions, it's impossible to use non-default pool for such sessions. Abuse chap-secret's 4th field as pool=name to specify session's pool name. With ippool module loaded after chap-secrets (default order), it will be used for allocation from the specified poll name. Compatibility considerations: * pppd will skip 'pool=' with warn 'unknown host in auth. address list' same as 5th field - shaper, because starting from 4th field pppd parse list of value. so, no new effects here. previous versions of accel-ppp will parse 'pool=' as empty address. with no 'pool=' in chap-secrets or with no chap-secrets loaded, no behavior change. with no ippool loaded, session will get no peer address. * with ippool loaded before chap-secrets, chap-secrets's ipdb will not be used, therefore neither ip addess not pool name will has no effect. * if chap-secrets' pool is invalid or not found, default pool will be used by ippool or address came from radius. * chap-secret's pool name might override pool came from radius, if radius module is loaded after chap-secrets and no address came from radius.