vyatta-wanloadbalance.git/src, branch clavyatta wan load balance project (mirror of https://github.com/vyos/vyatta-wanloadbalance.git)
https://git.amelek.net/vyos/vyatta-wanloadbalance.git/atom?h=cla2023-12-07T20:42:17+00:00conntrack: T5571: Remove conntrack rules - handled by vyos-1x2023-12-07T20:42:17+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-09-16T10:15:27+00:00urn:sha1:64496ef2d999c9608a97b387ea0beacf05dfc4d8T5741: Update dhclient lease path to /run/dhclient2023-11-14T19:32:39+00:00M. Hamzah Khanhamzah@hamzahkhan.com2023-11-14T19:32:39+00:00urn:sha1:34846df882bf25d0e94e46fa1e402ff98151f85dT4173: load-balancing wan replace some iptables-nft rules2023-03-29T18:32:28+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-03-29T18:32:28+00:00urn:sha1:79a30d763ec45a23163ef84f9b45ed7e7dba1d21
There are some incompatibility with current version of
kernel/nftables and work of 'iptables-nft'
It cannot insert/delete new rules via 'iptables-nft'
For example:
table ip nat {
chain VYOS_PRE_SNAT_HOOK {
type nat hook postrouting priority srcnat - 1; policy accept;
counter jump WANLOADBALANCE
}
chain WANLOADBALANCE {
ct mark 0xc9 counter snat to 192.0.2.14
}
}
vyos@r14# sudo iptables-nft -t nat -I VYOS_PRE_SNAT_HOOK 1 -j WANLOADBALANCE
iptables: No chain/target/match by that name.
One mention that I know that it was working in 'VyOS 1.4-rolling-202302010317'
Replace some 'iptables-nft' rules with eq nftables rules to return the basic
ability to load-balance traffic.
load-balancing: T1311: Delete load-balancing connections2022-08-29T10:54:47+00:00Viacheslav Hletenkov.gletenko@vyos.io2022-07-11T15:03:32+00:00urn:sha1:be48e153be982d88b2d09a9a8e3c09f8c1b620e9
Load-balancing WAN with conntrackd cannot flush connection
properly. It cause high CPU utilization and and hang after commit
Replace Flush to Delete
firewall: T2199: Use iptables-nft to work with new firewall2021-10-19T22:10:38+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2021-07-31T22:25:53+00:00urn:sha1:280bf2ef8ec8de8dc54a517e6c392087abc1e933wanloadbalance: T3395: fix DHCP filename and ICMP status line2021-03-08T17:40:00+00:00Brandon Steplerbrandon@stepler.net2021-03-08T17:40:00+00:00urn:sha1:2c42f5ec145f1332f23498313473af3d5b24ab44T2696: collection of small fixes to increase stability2020-07-12T19:16:22+00:00Christian Poessingerchristian@poessinger.com2020-07-12T19:16:22+00:00urn:sha1:ab841d3588c88e0e8ef86693471281badce92a9f
- Error on exit when clear routing tables
- Possible crash (buffer overflow) in function for receive icmp echo packet
- Error in parsing of config file for udp ttl "probe"
- Wrong error messge in analyzing config file
Bugfix: T1247 - WAN load-balancing fail when !<x.x.x.x/x> configured in rules2019-02-14T23:28:25+00:00hagbardvyosdev@derith.de2019-02-14T23:28:25+00:00urn:sha1:0dad02277c1312b285d067ea180b7aac49bc7026T462: run load balancing scripts as vyattacfg GID.2018-06-07T11:01:27+00:00Daniil Baturindaniil@baturin.org2018-06-07T11:01:27+00:00urn:sha1:e796b6a9dbf8eaa66b746a75c3211d9ea7ac458b
Since it uses the same function for executing everything,
need to verify that it has no adverse effect on iptables commands.
Merge branch 'current' into HEAD2016-04-02T16:48:05+00:00Mihail Vasilievmick@corp.linkintel.ru2016-04-02T16:48:05+00:00urn:sha1:12f19de392ec9eaebc4ec51ac19f225288147832