accel-ppp.git/accel-pppd, branch patchHigh performance PPTP/L2TP/SSTP/PPPoE/IPoE server for Linux (mirror of https://github.com/marekm72/accel-ppp.git)
https://git.amelek.net/marekm72/accel-ppp.git/atom?h=patch2024-09-29T07:42:48+00:00Don't terminate whole PPPoE session in response to client IPV6CP TermReq if IPv6 not required2024-09-29T07:42:48+00:00marekm7235698605+marekm72@users.noreply.github.com2024-09-29T07:42:48+00:00urn:sha1:1e5e998a2aa8ddbe6959b3ef878ef9699568d9dd
See accel-ppp/accel-ppp#57 for the bug report, please review.Merge pull request #35 from svlobanov/fix-radius-overflow2022-01-24T07:46:13+00:00xebdxeb@mail.ru2022-01-24T07:46:13+00:00urn:sha1:0b4ef9862c65bffd7c2e5798cb35948548ac724d
fix buffer overflow when receive radius packetMerge pull request #33 from DaniilHarun/vrf-radius2022-01-14T11:43:26+00:00xebdxeb@mail.ru2022-01-14T11:43:26+00:00urn:sha1:7c8837ebb10a0a1bb056f7e4859814bf6bd6e4ef
Added support for binding device name for radius request and DM/CoA server. Check if ipv6 dp availible before answer2022-01-13T07:52:35+00:00DmitriyEshenkodmitriy.eshenko@vyos.io2022-01-03T13:06:07+00:00urn:sha1:f756c265e991db26806787b12f8e2d8f96e8d47dfix buffer overflow when receive radius packet2021-12-29T06:54:13+00:00Sergey V. Lobanovsergey@lobanov.in2021-12-29T06:54:13+00:00urn:sha1:d4cb89721cc8e5b3dd3fbefaf173eb77ecb85615
This patch fixes buffer overflow if radius packet contains invalid atribute length
and attrubute type from the following list: ipv4addr, ipv6addr, ipv6prefix or ifid
Reported-by: Chloe Ong
Reported-by: Eugene Lim <spaceraccoon@users.noreply.github.com>
Reported-by: Kar Wei Loh
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
These changes are in response to PR comments2021-12-28T12:35:08+00:00rootroot@debian11-vyos-build.polycomm.net2021-12-28T12:35:08+00:00urn:sha1:2bbeb7eb0a56ea34a8a3d2f7aba81836bcb50835Added VRF support for radius request and DM/CoA server.2021-12-28T09:50:44+00:00rootroot@debian11-vyos-build.polycomm.net2021-12-28T09:50:44+00:00urn:sha1:2804a115fc2cd0d785d9a6dcb0be247c97c32d69
New configuration format:
[radius]
server=address,secret[,auth-port=1812][,acct-port=1813][,vrf=VRF_NAME][,req-limit=0][,fail-timeout=0,max-fail=0,][,weight=1][,backup]
dae-server=x.x.x.x:port,secret[,vrf=VRF_NAME]
By default, VRF name is undefined.
Merge pull request #31 from svlobanov/T55-netlink-socket-size2021-12-21T08:05:46+00:00xebdxeb@mail.ru2021-12-21T08:05:46+00:00urn:sha1:cca47ac174d1f2a99ee4969423e2bbc4b2fb6af8
T55: add netlink buffer size configuration parametersT57: use readlink exe_buf to determine correct program name after restart2021-12-20T21:46:00+00:00DmitriyEshenkodmitriy.eshenko@vyos.io2021-12-20T21:46:00+00:00urn:sha1:12f99c6a7f340ccb81871a7eed64cca9dd43d5f7T55: add netlink buffer size configuration parameters2021-12-20T15:00:32+00:00Sergey V. Lobanovsergey@lobanov.in2021-12-20T15:00:32+00:00urn:sha1:5249bf6428e70aa489aa9b8c44b16935c391a7fe
Netlink buffers may overflow so it might be useful to increase send and receive
netlink buffer sizes.
Two parameters to [common] configuration section added: nl-rcv-buffer,
nl-snd-buffer.
It is required to set (sysctl) net.core.wmem_max>=nl-snd-buffer and
net.core.rmem_max>=nl-rcv-buffer before running accel-pppd
To check current netlink buffer size and related info use the following command:
% ss -f netlink -m
0 0 rtnl:kernel * skmem:(r0,rb212992,t0,tb212992,f0,w0,o0,bl0,d0)
0 0 rtnl:-1140221812 * skmem:(r0,rb2048000,t0,tb80000,f0,w0,o0,bl0,d0)
0 0 rtnl:accel-pppd/14285 * skmem:(r0,rb2048000,t0,tb65536,f0,w0,o0,bl0,d0)
...
(Please check man ss to get the meaning for r,rb,t,tb,f,w,o,bl and d params)
In the ss output you will see the values doubled from configured.
First accel-pppd netlink socket will use default values (rcv=1048576, snd=32768)
regardless of configured nl-rcv-buffer and nl-snd-buffer values.
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>