conntrack-tools.git/doc/sync/ftfw, branch conntrack-tools-0.9.11

config: add NetlinkBufferSize and NetlinkBufferSizeMaxGrowth

2009-02-21T13:18:56+00:00

This patch adds two alias that removes an inconsistency in the configuration file names. Now, the clauses that refers to Netlink starts by the prefix "Netlink". Signed-off-by: Pablo Neira Ayuso

doc: unset ACKWindowSize in example configuration files

2009-02-15T15:11:28+00:00

This patch unset ACKWindowSize since it already sets the clause to its default value. Signed-off-by: Pablo Neira Ayuso

src: add Nice clause to set the nice value

2009-02-08T19:55:34+00:00

Signed-off-by: Pablo Neira Ayuso

netlink: add new option NetlinkOverrunResync

2009-02-08T18:13:22+00:00

This patch adds NetlinkOverrunResync. This option can be used to set the amount of time after which the daemon resynchronizes itself with the kernel state-table if it detects a Netlink overrun. Signed-off-by: Pablo Neira Ayuso

doc: increase hashtable bucket size and limits in example files

2009-01-25T18:15:01+00:00

This patch details a bit more the hashtable parameters. Moreover, it increases the default size of the hashtable. Signed-off-by: Pablo Neira Ayuso

doc: use 'From' instead of 'from' in the example configfiles

2009-01-25T17:50:43+00:00

This patch fixes a wrong use of 'from' instead of 'From' in the example configuration files. Reported-by: Yoann Juet Signed-off-by: Pablo Neira Ayuso

doc: unset CommitTimeout by default

2009-01-25T17:21:26+00:00

This patch disables CommitTimeout by default. The daemon now uses the approximate timeout calculation by default. Signed-off-by: Pablo Neira Ayuso

src: increase default PurgeTimeout value

2009-01-25T16:53:14+00:00

This patch increases the default PurgeTimeout value to 60 seconds. The former 15 seconds provides good real-time reaction in terms of user-side expected behaviour, but it is too small if you trigger random failure in a firewall cluster. Signed-off-by: Pablo Neira Ayuso

ftfw: add ResendQueueSize and deprecate ResendBufferSize clauses

2009-01-17T17:24:57+00:00

This patch adds ResendQueueSize, which sets the number of objects that can be stored in the resend queue waiting to be confirmed. The ResendBufferSize clause has been deprecated. Signed-off-by: Pablo Neira Ayuso

src: add state polling support (oppossed to current event-driven)

2009-01-17T17:03:53+00:00

This patch adds the clause PollSecs that changes the normal behaviour of conntrackd. With PollSecs set to > 0, conntrackd polls every N seconds the entries. This is the opposed behaviour of an event-driven behaviour but may be useful for those that have really strong limitations in terms of CPU consumption and want to perform a relaxed replication. Signed-off-by: Pablo Neira Ayuso