conntrack-tools.git/doc/sync/ftfw, branch conntrack-tools-0.9.8

doc: remove example about CacheWriteTrough

2008-10-21T17:53:23+00:00

This patch removes the documentation about the CacheWriteTrhough clause. This feature is scheduled for removal since the asynchronous nature of conntrackd does not allow multi-path routing support. I'm lying, actually there's a chance to support it, but we have to guarantee that the RTT in the message synchronization between the firewall is smaller than the RTT between the peer and the firewalls. Moreover, this option has made more bad than good since people enable it when things don't work. Making the whole troubleshooting more complicated. Signed-off-by: Pablo Neira Ayuso

doc: rise default size of the hashtable in the example file

2008-10-20T14:52:04+00:00

This patch rises the default value of the hashtables in terms of buckets and entries to the default value in nf_conntrack. Signed-off-by: Pablo Neira Ayuso

config: use /var/run to create the UNIX socket file

2008-09-18T16:44:23+00:00

This patch removes the use of /tmp to create the UNIX socket file to communicate with conntrackd in the example configuration files. This was OK in the early alpha days, but not anymore. Signed-off-by: Pablo Neira Ayuso

cache iterators: rework cache_reset_timers

2008-08-07T12:53:12+00:00

This patch adds the clause PurgeTimeout that sets the new timer when conntrackd -t is called. This command is particularly useful when the sysadmin triggers hand-overs between several nodes without rebooting as it reduces the timers of the remaining entries in the kernel. Thus, avoiding clashes between new and old entries that may trigger INVALID packets. Signed-off-by: Pablo Neira Ayuso

script: rework scripts that enable interaction with keepalived

2008-08-02T16:51:34+00:00

This patch reworks the documentation section. It removes the replicated keepalived.conf files and merge all the scripts into one to reduce confusion and improve maintainability. It's likely that the documentation directory will suffer more restructurations in the near future. Signed-off-by: Pablo Neira Ayuso

doc: remove duplicated example files

2008-08-01T16:31:25+00:00

This patch removes the directories node1/ and node2/ since the differences are few small and the user should be able to get it running if he RTFM. Signed-off-by: Pablo Neira Ayuso

fix: wrong information related to default logging action

2008-08-01T09:59:55+00:00

Logging is set off by default instead of what the example files state. Signed-off-by: Pablo Neira Ayuso

cleanup: remove obsolete clause Replicate in the example conffiles

2008-08-01T09:35:27+00:00

Remove obsolete clause Replicate in the example configuration files. Signed-off-by: Pablo Neira Ayuso

Major rework of the user-space event filtering

2008-07-22T10:13:43+00:00

This patch reworks the user-space filtering. Although we have kernel-space filtering since Linux kernel >= 2.6.26, we keep userspace filtering to ensure backward compatibility. Moreover, this patch prepares the implementation of the kernel-space filtering via libnetfilter_conntrack's high-level berkeley socket filter API. Signed-off-by: Pablo Neira Ayuso

add Mcast[Snd|Rcv]SocketBuffer clauses to tune multicast socket buffers

2008-05-20T13:52:06+00:00