summaryrefslogtreecommitdiff
path: root/accel-pppd/accel-ppp.conf.5
AgeCommit message (Collapse)Author
2019-11-10Added single-session-ignore-case optionSergey V. Lobanov
If multisession behavior is managed by accel-ppp and Radius server ignores the case of the User-Name attribute, it might be required to ignore the case in accel-ppp to prevent multiple session with different letter cases.
2019-08-29ppp/ipoe: cleanup cleck-ip supportVladislav Grishenko
let check-ip setting from [ppp]/[ipoe] sections has prio over [common] for compatibility with older configs.
2019-08-27Merge pull request #92 from themiron/sstpxebd
sstp: implement ssl-protocol option and add unsupported features logging
2019-08-25shaper: adding default rate-limitDmitriyEshenko
2019-08-20Prepared check-ip and for ipoe, migrate to [common]check-ipDmitriyEshenko
2019-07-27sstp: implement ssl-protocol list optionVladislav Grishenko
possible protocols are ssl2, ssl3, tls1, tls1.1, tls1.2 and tls1.3, but support does depend on openssl library. defaults are up to openssl library w/o ssl2/ssl3.
2019-06-27Update accel-ppp.conf.5Eshenko Dmitriy
2019-06-20Merge pull request #81 from DmitriyEshenko/patch-5xebd
Add info [ipoe]session-timeout and [ipoe]idle-timeout to accel-ppp.conf.5
2019-06-20Merge pull request #80 from DmitriyEshenko/patch-4xebd
Add info [modules]connlimit to accel-ppp.conf.5
2019-06-20Merge pull request #79 from DmitriyEshenko/patch-3xebd
Fix: ipv6-dns accel-ppp.conf.5
2019-06-18Update accel-ppp.conf.5Eshenko Dmitriy
2019-06-18Update accel-ppp.conf.5Eshenko Dmitriy
2019-06-14Update accel-ppp.conf.5Eshenko Dmitriy
2019-06-14Update accel-ppp.conf.5Eshenko Dmitriy
2019-05-09Add information about [common] sectionDmitriyEshenko
2019-05-09Add information [modules]log_syslog and [ipoe]offer-timeoutDmitriyEshenko
2018-06-05sstp: add ECDSA certs support and ssl-ecdh-curve option for ECDHE ciphersVladislav Grishenko
2018-06-05sstp: add ssl-dhparam option for DHE ciphersVladislav Grishenko
2018-06-01sstp: implement configurable http error response incl. redirectVladislav Grishenko
2018-05-25man: fixed typoDmitry Kozlov
2018-05-25ipoe: introduced ip-unnumbered per-interface optionDmitry Kozlov
2018-02-27sstp: implement proxy-protocol 1 & 2 supportVladislav Grishenko
2018-02-27sstp: implement ipv6 & unix socket supportVladislav Grishenko
following bind option formats are valid: bind=x.x.x.x bind=2001:db8::1 bind=unix:/var/run/sstp.socket bind=unix:@sstp port option is meaningful for ipv4 and ipv6 only
2018-02-27sstp: implement accept list optionVladislav Grishenko
currently the only ssl value is supported
2018-02-08pptp: add the ppp-max-mtu option to match l2tp & sstpVladislav Grishenko
2018-01-05sstp: add man & readme recordsVladislav Grishenko
2017-12-27ipoe: implemented new load balancing mechanismDmitry Kozlov
new config options: [ipoe] weight=N - global weight interface=ethX,weight=N - per-interface weight How it works: On reception of DHCPDISCOVER accel-ppp sends broadcast DHCP message to port 67 with same xid and add special vendor-specific option where encodes its current session count multipled by weight. On reception of such message accel-ppp searches session with same xid and compares weight. If received weight is less than session's weight then it terminates this session. per-interface weight=0 has special meaning as backup (fail-over) interface, f.e. it terminates session on any received weight. By default weight based load balancing is disabled. To enable need to specify global or/and per-interface weight.
2017-12-25ipv6pool: added gw-ip6-address option and special handling for /128 prefixesDmitry Kozlov
If pool specified with /128 prefix length, then initialize intf_id by gw_ip6_address and peer_intf_id by generated pool address.
2017-12-14ippool: implemented next pool supportDmitry Kozlov
config changes: [ip-pool] x.x.x.x/mask,name=pool1 y.y.y.y/mask,name=pool2,next=pool1
2017-12-05ppp: implement per-ctrl ppp interface rename support, may be overrided by radiusVladislav Grishenko
Reuse exsisting radius functionality and allow set iterface name template for pppoe/pptp/l2tp, '%d' specification will be replaced automagically to the next available index by kernel. PPP interface rename allows to easy differ client's interfaces from the other ppp ones, for example, with just netfilter interface rules. Example: [pptp] ifname=pptp%d will produce pptp0, pptp1, ...
2017-09-25ipoe: introduced interface option mtu=NDmitry Kozlov
2017-08-08Merge branch 'master' of github.com:xebd/accel-pppDmitry Kozlov
2016-11-13Add possibility to specify multiple service names, add option ↵root
accept-any-service to provide backward compatibility with old accel-ppp
2016-06-25ppp: introduced unit-preallocate optionDmitry Kozlov
If set to 1 then allocate unit (interface) before authorization, so Nas-Port and Nas-Port-Id would be defined in Access-Request phase
2016-03-18ipoe: implemented new option "start=auto"Dmitry Kozlov
If start=auto is specified then accel-pppd automatically starts session with username = interface name on shared=0 interfaces. Use it with conjuction vlan_mon. So any packet may start session.
2016-03-18ipoe: restored local-net functionDmitry Kozlov
local-net is used to filter incomming packets which may start UP session
2016-03-13ipoe: many many changesDmitry Kozlov
2015-11-18ipoe: for vlan name pattern implemented %P argument - VID of parent interfaceDmitry Kozlov
2015-11-17ipoe: implemented dhcp option 58Dmitry Kozlov
2015-08-17ipoe: introduced 'calling-sid' optionDmitry Kozlov
This option specifies value of Calling-Station-Id value. Available options are 'mac' and 'ip'.
2015-07-02ipoe: introduced option "check-mac-change"Dmitry Kozlov
Default behaviour of accel-ppp when it receives DHCP request with same Option 82 but different MAC address is termination of old session (with previous MAC address). This option can turn off such behaviour, so multiple sessions with same Option 82 but different MAC may coesist.
2015-04-18ipoe: added info about "sfot terminate" modeDmitry Kozlov
2015-02-21ipoe: for option password implemented special value "csid"Dmitry Kozlov
If password=csid then password will we same as Calling-Station-Id.
2014-11-17shaper: introduce "fwmark" optionDmitry Kozlov
If specified then fwmark filters will be installed to bypass shaper
2014-11-10shaper: fixed passing quantum parameter to kernelDmitry Kozlov
shaper: introduced moderate-quantum option If fixed quantum is not specified and moderate-quantum is specified then shaper module will check for quantum value to be in valid range (1000-200000). This suppresses annoying kernel messages. Remark: quantum is rate/r2q, rate is in bytes/sec.
2014-10-28ipoe: implemented "L4 redirect on reject" for DHCP sessionsDmitry Kozlov
If authentication rejects session, but l4-redirect-on-reject is specified in config then temporary session will be created and l4 redirect rule will be applied to IP of that session. Session will be terminated after specified number of seconds. Also if l4-redirect-ip-pool option is specified then IP will be allocated from that special pool.
2014-10-23radius: fixed stuck during shutdown when radius server does not respondDmitry Kozlov
2014-10-22cli: introduced verbose optionDmitry Kozlov
If verbose=0 then cli won't produce any logging if verbose=1 then log only connections if verbose=2 then log also executed commands
2014-09-13ppp: implement address/control and protocol field compressionVladislav Grishenko
2014-09-13shaper: implemented fq_codel leaf qdiscDmitry Kozlov
Parameters are same as for tc: [shaper] leaf-qdisc=fq_codel [ limit PACKETS ] [flows NUMBER ] [ target TIME ] [ interval TIME ] [ quantum BYTES ] [ [no]ecn ]
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-10 16:40:33 +0000