summaryrefslogtreecommitdiff
path: root/src/lbdecision.cc
AgeCommit message (Collapse)Author
2015-10-25vyatta-wanloadbalance: missing hex prefix format specifier flagAlex Harpin
Replacing the missing hex prefix format specifier flag used for routing table creation (tables missing from previous related commit) Bug #61 http://bugzilla.vyos.net/show_bug.cgi?id=61
2015-10-25vyatta-wanloadbalance: formatting changes for style consistencyAlex Harpin
Update src/lbdecision.cc to maintain style consistency
2015-10-25vyatta-wanloadbalance: offset load-balancing fwmarks to avoid conflictsAlex Harpin
Offset the fwmarks used in load-balancing to avoid conflicts with routing tables created by policy based routing. Originally from Benjamin Beret. Bug #61 http://bugzilla.vyos.net/show_bug.cgi?id=61
2015-10-25Revert "Make iptables rules use RETURN instead of ACCEPT (#362/#61)"Alex Harpin
This reverts commit e9001877d3bbdd5c4c48f0ccc088bd381d0b92dc. Since the upstream change in the kernel from 3.6 onwards, where the ipv4 routing cache has has been removed due to performance bottlenecks and the fact that it was reasonable easy to launch denial of service attackes (it was designed in friendlier times), the kernel now reverts back to round-robin per packet routing rather than per flow as it was previously, with the result that this commits breaks load-balancing with two active routes. http://git.kernel.org/cgit/linux/kernel/git/davem/net-next.git/commit/?id=89aef8921bfbac22f00e04f8450f6e447db13e42 Bug #344 http://bugzilla.vyos.net/show_bug.cgi?id=344
2014-11-25Make iptables rules use RETURN instead of ACCEPT (#362/#61)kouak
Offset fwmarks and ip route tables by 200 (#61)
2014-10-17Vyatta Bugfix 6245: Sticky incoming connection support for WLBEwald van Geffen
Signed-off-by: Daniil Baturin <daniil@baturin.org>
2014-10-17Revert "Vyatta Bugfix 6245: Sticky incoming connection support for WLB"Daniil Baturin
Replacing with an updated patch. This reverts commit 461db303287b4f838b68b120a9656c9fc31070b2.
2014-09-01Vyatta Bugfix 6245: Sticky incoming connection support for WLBEwald van Geffen
Signed-off-by: Daniil Baturin <daniil@baturin.org>
2010-08-31fix following changes associated with bug 6125Michael Larson
2010-08-27fix squeeze build issuesAn-Cheng Huang
2010-08-26fix for bug 5990Michael Larson
remove policy route on shutdown.
2010-07-16fix for bug 5583.Michael Larson
2010-06-21added syslog messages on failure to insert default route into policyMichael Larson
table.
2010-06-19submission in reponse to forum posting on multiple entries found in snat ↵Michael Larson
table with adsl dhcp configuration: http://www.vyatta.org/forum/viewtopic.php?t=4254
2010-04-06fix for bug 5520.Michael Larson
When checking policy route compare nexthop and interface rather then just checking for an entry. This allows for incorrect entries to be replaced. This would be a problem if different nexthop is readvertised via dhcp to the interface.
2010-03-09bugfix for 5427. remove outbound interface exclusion on OUTPUT table (i.e. ↵Michael Larson
local) traffic when exclude rule is specified.
2009-10-16Should handle all of the merge issues.slioch
fix for bug 4675. Throttle back the initial setting of nat rules during startup of wlb. Conflicts: src/lbdecision.cc
2009-10-02change name of local packet balancing tag from "disable-local-traffic" to ↵Michael Larson
"enable-local-traffic". This preserves previous behavior (i.e. no balancing of local traffic) by default, but can be enable via the configuration node. Conflicts: scripts/vyatta-wanloadbalance.pl src/lbdecision.cc
2009-10-02bug 4971 fix.Michael Larson
also supports additional command to disable balancing of locally sourced traffic "disable-local-traffic" Conflicts: src/lbdecision.cc
2009-07-29fix for bug 4762. exclude packets from the mangle output table where the ↵slioch
inbound interface for wlb is the same as the packet outbound interface.
2009-07-27clean up all of mangle table on exit, including new entries. fixed bug in ↵slioch
target iteration where some targets never completed test cycle
2009-07-27fixed iptables command for when limit is applied--only for state=NEW w/o ↵slioch
source-based-policy applied
2009-07-24bug fixes on mult targets. added packet rate limit option to rulesslioch
2009-07-17reworked target code to support multiple targets and different target types.slioch
user can now specify a sequence of targets to test (ordered by rule number). The first success satifies the success criteria for the test and no further tests will be performed on the interface for this period. Additional test types can be coded and added to the target framework. configuration has changed as a result of the rework.
2009-07-15fix for bug 4675. Throttle back the initial setting of nat rules during ↵slioch
startup of wlb. Conflicts: src/lbdecision.cc
2009-07-15fix for bug 4730slioch
2009-07-08fix for case where iptables command fails on setting snat rules after ↵root
receiving new address. in this case the new address is not recorded and we'll try creating the rule on the next processing cycle until successful.
2009-07-08fix for bug 4699. Note that dhcp nexthop detection was also broken due to ↵slioch
changes in the location of the dhcp client information. this was also fixed.
2009-07-07fix for bug 3704. move primary call to wlb mangle tables out of prerouting ↵slioch
and output table scope. now tables are not flushed on removal.
2009-07-07added configuration hook to execute script on interface state change. ↵slioch
configurable via conf mode. environment variables identify interface and new state.
2009-07-07fix for bug 4083. Names in mangle table now reference outbound interface as ↵slioch
per comments in bug.
2009-07-06fix for bug 4351. Move conntrack to feature specific chain for raw table.slioch
2009-06-17filter on output table for packets already marked in the prerouting tableslioch
2009-06-16fixed output mangle rule creation. need to suppress inbound interface on ↵slioch
rule creation for output rule entry as these are locally sourced packets.
2009-06-08fix for bug 4130. Requires additional configuration outside WLB to support ↵slioch
network reachability determination. All locally source routes need an entry in table main that satisfies reachability requirements. This is due to the output mangle table being processed after reachability determination for locally sourced routes. Note that routes will still be subject to routing by WLB (provided they match the WLB rule set).
2009-06-02fix for bug 4409. Additional dynamic support for dynamic policy route and ↵slioch
snat when wlb is configured and during runtime. also fix for wlb when running in debug mode.
2009-04-02added source based routing feature.slioch
2009-02-09added support for global level conntrack flushing on interface state change. ↵slioch
Default configuration is to disable this feature.
2008-12-15fixed bug with dhcp support--route was not be reinserted on link down when ↵slioch
configured for dhcp. need to retrieve actual nexthop in this case.
2008-12-05added support for dhcp in daemon. On receiving SIGUSR2 daemon checks and ↵slioch
updates new address for snat, and nexthop for lb routing tables. hook needs to be added to dhclient daemon to send SIGUSR2 to wan_lb so notification is generated on address change event. Note that for this behavior to be active in WLB nexthop needs to be populated with 'dhcp' configuration string. still requires routing paths availble for target testing, which might require an update to the dhcp client script and possible configuration knob.
2008-09-25fix for bug 3710. also found and fixed another bug with restarting of wlb ↵slioch
after changing rule set. this simplifies the application of the rules to the mangle table.
2008-08-29modified failover algorithm to provide deterministic control over which ↵Mike Larson
interface is selected. The interface with the highest weight will be preferred.
2008-08-29add rule failover support. Failover mode can now be specified on a specific ↵Mike Larson
rule. This rule will only direct traffic to a single active interface, on failure of the ping target traffice will be directed out an alternate interface. note: the one todo item for this feature is to add "stickiness" of an active interface. wlb re-evaluates all rules on an interface state change and this may cause the interface to change for failover mode. supporting this mode requires a less than trivial rewrite of the wlb decision code.:
2008-08-26revised fix for dst-range bug to mirror fix for src.Mike Larson
2008-08-26fix for bug 3621.slioch
2008-08-22snat rules created by wanloadbanana are now applied before snat rules ↵root
created by nat. this shouldn't be a problem for nat, as the wanloadbanana rules are filters on packets marked in the mangle table. now using the new jump to target inserted by vyatta-cfg-firewall project on boot.
2008-08-22Partial fix for bug 3332. WLB can now be configured to run without creating ↵root
implicit source nat rules. This configuration element applies to the complete wan load balance configuration.
2008-08-22fix for bug 3620. exclusion option is now provided and will create an accept ↵root
rule. For an exclusion the user does not need to configure interfaces for that rule to balance across.
2008-07-10my bad. last commit I changed the conntrack module name to uppercase which ↵root
caused the snat rules to not match the iptables module and therefore fail on load. this should fix the problem, tested icmp with standard configuration and default routes, works now.
2008-07-01fix for bug 3410. added entry for marking of connectionless packets.Michael Larson