summaryrefslogtreecommitdiff
path: root/accel-pppd
AgeCommit message (Collapse)Author
2022-05-08T60: Implement configurable session-timeout param for all connection typesDmitriyEshenko
2022-04-21Merge pull request #45 from svlobanov/nas-port-idxebd
add switch to disable sending NAS-Port-Id
2022-04-21Merge pull request #34 from DaniilHarun/T22xebd
T22: connection limit for non-shared interfaces by interface index
2022-04-21Merge pull request #40 from 6WIND/bugfixesxebd
Bugfixes
2022-04-20add switch to disable sending NAS-Port-IdSergey V. Lobanov
This patch introduces nas-port-id-in-req switch to disable sending NAS-Port-Id attribute in radauth and radacct messages. New switch might be useful if radius server cannot properly handle this attrubite. Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-03-08auth: fix CHAP challenge with ixiaGabriel Jeanneau
here is the structure of CHAP challenge message for PPP: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Code | Identifier | Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Value-Size | Value ... +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Name ... +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ When sending a CHAP challenge, accel-ppp set NAME to NULL. According to RFC 1994 (PPP CHAP), this field should neither be NULL nor be equal to CR/LF. As ixia does not recognize AUthentication packet when this field is NULL, we set it to "accel-ppp" by default. In MS-CHAPv1 and MS-CHAPv2, authenticator does not provide information in Name field. Signed-off-by: Gabriel Jeanneau <gabriel.jeanneau@6wind.com>
2022-03-04triton: fix use after free in timer.cGabriel Jeanneau
When using pppd_compat module, accel-ppp crash with SIGBUS on spin_lock(&t->ctx->lock) of timer_thread. When a moduile call triton_timer_del, fd are close without taking into account epoll function and without removing from polled fd list. File descriptor are removed from polled fd list and then close in timer_thread avoiding use after free. Fixes: 5bac5a2edb7b ("rewriting triton library...") Signed-off-by: Gabriel Jeanneau <gabriel.jeanneau@6wind.com>
2022-03-04ppp_chan_read: check unit_hnd avoiding proto rejGabriel Jeanneau
When receiving IPCP packet on channel handler, check unit handler to avoid sending a LCP Protocol Reject because ppp unit has not been created yet. This patch allows accel-ppp to handle higher pressure (handle 300 connections per second). Signed-off-by: Gabriel Jeanneau <gabriel.jeanneau@6wind.com>
2022-03-04accel-pppd: Fix buildroot compilationGabriel Jeanneau
CMAKE_FIND_ROOT_PATH variable is a list of pathes used by CMAKE to find packages and library for compilation. It should not be used for installation as : - it is a list - it points to staging folder of packaging tools. So let's use a more standard CMAKE code to make sure files and folders are actually installed in target destination. Signed-off-by: Gabriel Jeanneau <gabriel.jeanneau@6wind.com> Signed-off-by: Stéphane Gonauer <stephane.gonauer@6wind.com>
2022-02-23Update main.cMakselPr
Fixed typos in help
2022-01-24Merge pull request #35 from svlobanov/fix-radius-overflowxebd
fix buffer overflow when receive radius packet
2022-01-14Merge pull request #33 from DaniilHarun/vrf-radiusxebd
Added support for binding device name for radius request and DM/CoA server.
2022-01-13Check if ipv6 dp availible before answerDmitriyEshenko
2021-12-29fix buffer overflow when receive radius packetSergey V. Lobanov
This patch fixes buffer overflow if radius packet contains invalid atribute length and attrubute type from the following list: ipv4addr, ipv6addr, ipv6prefix or ifid Reported-by: Chloe Ong Reported-by: Eugene Lim <spaceraccoon@users.noreply.github.com> Reported-by: Kar Wei Loh Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2021-12-28These changes are in response to PR commentsroot
2021-12-28T22: connection limit for non-shared interfaces by interface indexroot
2021-12-28Added VRF support for radius request and DM/CoA server.root
New configuration format: [radius] server=address,secret[,auth-port=1812][,acct-port=1813][,vrf=VRF_NAME][,req-limit=0][,fail-timeout=0,max-fail=0,][,weight=1][,backup] dae-server=x.x.x.x:port,secret[,vrf=VRF_NAME] By default, VRF name is undefined.
2021-12-21Merge pull request #31 from svlobanov/T55-netlink-socket-sizexebd
T55: add netlink buffer size configuration parameters
2021-12-21T57: use readlink exe_buf to determine correct program name after restartDmitriyEshenko
2021-12-20T55: add netlink buffer size configuration parametersSergey V. Lobanov
Netlink buffers may overflow so it might be useful to increase send and receive netlink buffer sizes. Two parameters to [common] configuration section added: nl-rcv-buffer, nl-snd-buffer. It is required to set (sysctl) net.core.wmem_max>=nl-snd-buffer and net.core.rmem_max>=nl-rcv-buffer before running accel-pppd To check current netlink buffer size and related info use the following command: % ss -f netlink -m 0 0 rtnl:kernel * skmem:(r0,rb212992,t0,tb212992,f0,w0,o0,bl0,d0) 0 0 rtnl:-1140221812 * skmem:(r0,rb2048000,t0,tb80000,f0,w0,o0,bl0,d0) 0 0 rtnl:accel-pppd/14285 * skmem:(r0,rb2048000,t0,tb65536,f0,w0,o0,bl0,d0) ... (Please check man ss to get the meaning for r,rb,t,tb,f,w,o,bl and d params) In the ss output you will see the values doubled from configured. First accel-pppd netlink socket will use default values (rcv=1048576, snd=32768) regardless of configured nl-rcv-buffer and nl-snd-buffer values. Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2021-12-17T54: Use get_stats function to prevent garbage in countersDmitriyEshenko
2021-12-16vrf: T10: Add VRF supportDmitriyEshenko
Co-authored-by: Sergey V. Lobanov <svlobanov@users.noreply.github.com> Co-authored-by: Vladislav Grishenko <themiron@users.noreply.github.com>
2021-10-20T50: use server mac in arp replies for proxy_arp=2Sergey V. Lobanov
proxy_arp=2 should be used for ipoe setup with shared vlan and intra-vlan l2 isolation. accel-ppp should use server mac when sending arp reply message. There is no reason to send subscriber's mac if proxy_arp is enabled In case of ipoe shared vlan without l2-isolation, proxy_arp=1 should be used
2021-10-05Fixed typos in cli help.soup
2021-09-24Merge branch 'master' of github.com:accel-ppp/accel-pppDmitry Kozlov
2021-09-24triton: do not queue context in init stateDmitry Kozlov
2021-09-20Merge pull request #22 from DmitriyEshenko/masterVladislav Grishenko
Fix logging per-user-dir. Add possibility to drop session hard if it already has finish state
2021-09-08ipoe: check for local-net in arp requestsDmitry Kozlov
2021-09-04T46: Fix per-user-dir loggingDmitriyEshenko
2021-09-04Terminate session by the second PoD when soft-terminate=1 configuredDmitriyEshenko
2021-08-26Merge branch 'master' of github.com:accel-ppp/accel-pppDmitry Kozlov
2021-08-26fixed race condition when manipulating serv->timerDmitry Kozlov
2021-07-09ipoe: dhcpv4: fix address lost due signed overflowVladislav Grishenko
fixes a1a2b79240511222868a60960d51f12adbe0d7d4
2021-07-01T43: Change to list_for_each_safe to prevent segmentation faultDmitriyEshenko
2021-06-16ipoe: T41: Fix address range shiftingDmitriyEshenko
2021-05-25cli: fix absent OK status for 'show version'Vladislav Grishenko
fix 4b52c1a3590b43ca892c460d9b1478e1da742156
2021-05-25Merge branch 'master' of github.com:accel-ppp/accel-pppVladislav Grishenko
2021-05-25shaper: fix fq_codel noecn regressionVladislav Grishenko
2021-05-25shaper: fix 09f73dab273989c6f36efe548c4b5e83d83b5416 regressionVladislav Grishenko
closes #17
2021-05-24Merge pull request #15 from Joes-Madness/cli_show_versionxebd
cli: T40: Show version of running accel-pppd from cli or telnet
2021-05-24Merge pull request #14 from DmitriyEshenko/accept-blank-servicexebd
Add accept-blank-service option
2021-04-30Merge branch 'master' of github.com:accel-ppp/accel-pppDmitry Kozlov
2021-04-30ipoe: use destination address from IP header as server_id if not sent in ↵Dmitry Kozlov
dhcp request header
2021-04-27Add 'show version' command in CLIroot
2021-04-23Add accept-blank-service optionDmitriyEshenko
2021-04-08ippool, ipv6pool: fix iterating over circular poolsVladislav Grishenko
2021-04-07ippool: fix next pool handlingVladislav Grishenko
* fix no next pool when it was defined after referencing: 192.168.1.2-255,name=pool1,next=pool2 192.168.2.2-255,name=pool2 * fix UB when next pool was set to same pool: 192.168.1.2-255,name=pool1,next=pool1 * add warning about empty/not defined next pools
2021-04-07ipv6pool: fix next pool handlingVladislav Grishenko
* fix no next pool when subsequent pool prefix was defined w/o next pool: fc00:0:3::/48,64,name=pool1,next=pool2 fc00:0:4::/48,64,name=pool1 * fix no next pool when it was defined after referencing: fc00:0:3::/48,64,name=pool1,next=pool2 fc00:0:4::/48,64,name=pool2 * fix UB when next pool was set to same pool: fc00:0:3::/48,64,name=pool1,next=pool1 * add warning about empty/not defined next pools
2021-03-28radius: fix segfault regression after 62f7740033f05053a581e864742575a46ccc6da2[anp/hsw]
2021-03-23ipoe: recover common check-ip opt processingVladislav Grishenko
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-28 23:12:16 +0000