conntrack-tools.git/doc, branch conntrack-tools-0.9.10

doc: increase hashtable bucket size and limits in example files

2009-01-25T18:15:01+00:00

This patch details a bit more the hashtable parameters. Moreover, it increases the default size of the hashtable. Signed-off-by: Pablo Neira Ayuso

doc: use 'From' instead of 'from' in the example configfiles

2009-01-25T17:50:43+00:00

This patch fixes a wrong use of 'from' instead of 'From' in the example configuration files. Reported-by: Yoann Juet Signed-off-by: Pablo Neira Ayuso

doc: unset CommitTimeout by default

2009-01-25T17:21:26+00:00

This patch disables CommitTimeout by default. The daemon now uses the approximate timeout calculation by default. Signed-off-by: Pablo Neira Ayuso

src: increase default PurgeTimeout value

2009-01-25T16:53:14+00:00

This patch increases the default PurgeTimeout value to 60 seconds. The former 15 seconds provides good real-time reaction in terms of user-side expected behaviour, but it is too small if you trigger random failure in a firewall cluster. Signed-off-by: Pablo Neira Ayuso

ftfw: add ResendQueueSize and deprecate ResendBufferSize clauses

2009-01-17T17:24:57+00:00

This patch adds ResendQueueSize, which sets the number of objects that can be stored in the resend queue waiting to be confirmed. The ResendBufferSize clause has been deprecated. Signed-off-by: Pablo Neira Ayuso

src: add state polling support (oppossed to current event-driven)

2009-01-17T17:03:53+00:00

This patch adds the clause PollSecs that changes the normal behaviour of conntrackd. With PollSecs set to > 0, conntrackd polls every N seconds the entries. This is the opposed behaviour of an event-driven behaviour but may be useful for those that have really strong limitations in terms of CPU consumption and want to perform a relaxed replication. Signed-off-by: Pablo Neira Ayuso

src: support for redundant dedicated links

2009-01-17T17:03:52+00:00

This patch adds support for redundant dedicated links. You can add a pool of dedicated links that can be used if the current active fails. Signed-off-by: Pablo Neira Ayuso

run: limit the number of iterations over the event handling

2009-01-15T22:19:35+00:00

Currently, the event handling can starve other event file descriptors. This patch limits the number of event handling iterations. The parameter is tunable via configuration file. Signed-off-by: Pablo Neira Ayuso

doc: add note on McastSndSocketBuffer and McastRcvSocketBuffer

2008-12-17T18:34:16+00:00

This patch adds a note on the impact of having small values for the McastSndSocketBuffer and McastRcvSocketBuffer clauses. Signed-off-by: Pablo Neira Ayuso

doc: revert commit 9bc7d7f8f333e79323495a193f92c9d4f1708da9

2008-12-17T18:31:42+00:00

Signed-off-by: Pablo Neira Ayuso