1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
|
vyatta-wanloadbalance (0.13.7+jenner6) unstable; urgency=low
* filter on output table for packets already marked in the prerouting
table
-- slioch <slioch@eng-140.vyatta.com> Wed, 17 Jun 2009 12:56:12 -0700
vyatta-wanloadbalance (0.13.7+jenner5) unstable; urgency=low
* fix for bug 4578. Added warning message when the user configures
inbound and outbound on same rule, but will allow configuration with
warning.
-- slioch <slioch@eng-140.vyatta.com> Tue, 16 Jun 2009 16:46:58 -0700
vyatta-wanloadbalance (0.13.7+jenner4) unstable; urgency=low
* fixed output mangle rule creation. need to suppress inbound
interface on rule creation for output rule entry as these are
locally sourced packets.
-- slioch <slioch@eng-140.vyatta.com> Tue, 16 Jun 2009 11:44:14 -0700
vyatta-wanloadbalance (0.13.7+jenner3) unstable; urgency=low
* fix for bug 4130. Requires additional configuration outside WLB to
support network reachability determination. All locally source
routes need an entry in table
-- slioch <slioch@eng-140.vyatta.com> Mon, 08 Jun 2009 14:20:30 -0700
vyatta-wanloadbalance (0.13.7+jenner2) unstable; urgency=low
[ slioch ]
* fix for bug 4352.
* fix for bug 4409. Additional dynamic support for dynamic policy
route and snat when wlb is configured and during runtime. also fix
for wlb when running in
[ root ]
-- root <root@eng-140.vyatta.com> Tue, 02 Jun 2009 16:04:43 -0700
vyatta-wanloadbalance (0.13.7+jenner1) unstable; urgency=low
[ slioch ]
* handle condition where system time changes to time before last
success value. in this case set value until 0 until system time
catches up. only
-- An-Cheng Huang <ancheng@vyatta.com> Fri, 29 May 2009 18:33:11 -0700
vyatta-wanloadbalance (0.13.7) unstable; urgency=low
* missing configuration node required to configure sourced based
routing.
-- slioch <slioch@eng-140.vyatta.com> Fri, 15 May 2009 14:17:48 -0700
vyatta-wanloadbalance (0.13.6) unstable; urgency=low
* On socket bind error return and do not attempt to send icmp packet
-- slioch <slioch@eng-140.vyatta.com> Sat, 02 May 2009 00:00:18 -0700
vyatta-wanloadbalance (0.13.5) unstable; urgency=low
* need to convert commit tag on wlb to end tag.
-- slioch <slioch@eng-140.vyatta.com> Sat, 18 Apr 2009 20:15:20 -0700
vyatta-wanloadbalance (0.13.4) unstable; urgency=low
* added source based routing feature.
-- slioch <slioch@eng-140.vyatta.com> Thu, 02 Apr 2009 09:50:40 -0700
vyatta-wanloadbalance (0.13.3) unstable; urgency=low
* added support for global level conntrack flushing on interface state
change. Default configuration is to disable this feature.
-- slioch <slioch@eng-140.vyatta.com> Sat, 14 Feb 2009 16:31:36 -0800
vyatta-wanloadbalance (0.13.2) unstable; urgency=low
[ Stephen Hemminger ]
* Fix buggy shell script
[ slioch ]
* fix for problem found in webgui on restarting process.
[ An-Cheng Huang ]
-- An-Cheng Huang <ancheng@vyatta.com> Wed, 28 Jan 2009 18:28:46 -0800
vyatta-wanloadbalance (0.13.1) unstable; urgency=low
[ An-Cheng Huang ]
* add support for development build
[ Stephen Hemminger ]
* Convert to Vyatta::
[ slioch ]
* formatting part of 3191 fixed with this bug. moved from dumping
proc/net/ip_conntrack output to easier to digest formatted output.
* fix for 3191--now use conntrack binary to return relevant entries
that
* added sigusr2 to wake up process from sleep call. will be used to
wake up process when address changes via dhcp.
* added support for dhcp in daemon. On receiving SIGUSR2 daemon checks
and updates new address for snat, and nexthop for lb routing
[ An-Cheng Huang ]
* update maintainer information
* "files" file should be removed before package build
[ slioch ]
* completes work to support dhcp for wan lb.
* fixed bug with dhcp support--route was not be reinserted on link
down when configured for dhcp. need to retrieve actual nexthop in
this case.
* fix for bug 3968. enhanced show wan load balance according to
preferred design in bug listing. Also exposed time of last
[ An-Cheng Huang ]
-- An-Cheng Huang <ancheng@vyatta.com> Thu, 08 Jan 2009 12:21:11 -0800
vyatta-wanloadbalance (0.13) unstable; urgency=low
3.2.0
[ Mark O'Brien ]
[ slioch ]
* fix for bug 3608. add connnection comment to sudoers directory.
* fix for bug 3843. added warning level syslong messages on any
interface that changes state in wan lb.
* fix for bug 3817
* allow free form text field entry for inbound-interface. This allows
a wildcard (iptables style) interface to be set, allowing an
* missed this configuration node on checkin fix for bug 3332. Now
command is available.
* fix for bug 3710. also found and fixed another bug with restarting
of wlb after changing rule set. this simplifies the application of
the rules to
[ Mike Larson ]
* modified failover algorithm to provide deterministic control over
which interface is selected. The interface with the highest weight
will be preferred.
* add rule failover support. Failover mode can now be specified on a
specific rule. This rule will only direct traffic to a single active
interface, on failure of the ping target traffice will be directed
out an alternate interface.
* revised fix for dst-range bug to mirror fix for src.
[ slioch ]
* fix for bug 3621.
[ root ]
* fix for bug 3608.
* snat rules created by wanloadbanana are now applied before snat
rules created by nat. this shouldn't be a problem for nat, as the
wanloadbanana rules are filters on packets marked in the mangle
table.
* Partial fix for bug 3332. WLB can now be configured to run without
creating implicit source nat rules.
* fixed bug in parsing multiple rule sets
* fix for bug 3620. exclusion option is now provided and will create
an accept rule. For an exclusion the user does not need to configure
interfaces for that rule to balance across.
* fix for bug 3530. now nexthop and inbound-interface are required for
a successful commit.
* added new command that dumps the ip conntrack tables for connections
that have been marked by wan load balance. This addresses
enhancement request bug 3191.
[ Stephen Hemminger ]
* Handle quagga package name change
[ root ]
* fix for bug 3446. protocol assignment is now identical to firewall.
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@firebolt.vyatta.com> Tue, 25 Nov 2008 19:11:06 -0800
vyatta-wanloadbalance (0.12) unstable; urgency=low
3.1.2
[ Mark O'Brien ]
[ root ]
* my bad. last commit I changed the conntrack module name to uppercase
which caused the snat rules to not match the iptables module and
therefore fail on load. this should fix the problem, tested icmp
with standard configuration and default routes, works now.
* fix for bug 3245. need sudo for the rm.
[ Michael Larson ]
* fix for bug 3437
* fix for 2948--additional nodes need to refer to interface values.
* fix for bug 2779.
* fix for bug 3410. added entry for marking of connectionless packets.
* fix for bug 3393. apply default route on poll interval if route is
not present in policy table. This fixes a problem if the interface
is
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@firebolt.vyatta.com> Wed, 23 Jul 2008 21:36:20 -0700
vyatta-wanloadbalance (0.11) unstable; urgency=low
3.1.1
[ Mark O'Brien ]
[ Michael Larson ]
* fix for bug 3390, ip rule entry is now converted to a hex value.
* missing socket close statement.
* fix for bug 3373. also modified error message and return value on
not obtaining socket resource.
* fixed up status command output and add wait for interface address
check on wlb boot
[ rbalocca ]
* Add missing includes
[ Michael Larson ]
* need to add conntrack entry to the raw table. also cleaned up a few
* back out wait on parent pid for child--was causing problems when
loading config on boot.
* remove stdio statements
* reworked weight calculation. There were errors in how weights were
computed and applied when links failed.
* change on deamon option for parent process to wait
* added version information for wanloadbalance.
* fix jump instruction for source nat. fix route entry for interfaces
that are in admin/link down on wan lb
* fixed problem with ping target failure that is not the last listed
interface, now the correct mangle wan load balance is referenced
when an
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@firebolt.vyatta.com> Sat, 28 Jun 2008 11:22:31 -0700
vyatta-wanloadbalance (0.10) unstable; urgency=low
3.1.0
[ Mark O'Brien ]
[ Michael Larson ]
* added connmark snat rules. means that nat does not need to be
configured separately for wlb to work--this is
* catch empty ping target on ping send. fixes error msgs for
unresolved configured host name--possible fix for bug 3245.
* needs accept to truncation rule evaluation on a match. this should
now distribute traffic across interfaces.
* modified prerouting decisions to work with connmark. user needs to
specify inbound interface now (although
* fix for iptables rules in tcp state. should fix main problem with
wan
* added contract entry for state NEW for initial interface. Also add
parameter to specify nexthop via interface in
[ rbalocca ]
* Ignore log file
* Convert to our method of changelog creation
[ Mohit Mehta ]
* Fix Bug 3069 Help strings should be standardized
[ Michael Larson ]
* minor text change on conf error: bug 2951
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@firebolt.vyatta.com> Tue, 17 Jun 2008 09:27:42 -0700
vyatta-wanloadbalance (0.9) unstable; urgency=low
3.0.5
-- Mark O'Brien <mobrien@vyatta.com> Tue, 06 May 2008 12:43:45 -0700
vyatta-wanloadbalance (0.8) unstable; urgency=low
3.0.4
-- Mark O'Brien <mobrien@vyatta.com> Mon, 05 May 2008 16:41:02 -0700
vyatta-wanloadbalance (0.7) unstable; urgency=low
3.0.3
[ Mark O'Brien ]
[ rbalocca ]
* Indicate the VC4.0.2 release candidate in the changelog
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Tue, 29 Apr 2008 16:42:50 -0700
vyatta-wanloadbalance (0.6) unstable; urgency=low
VC4.0.2
-- Mark O'Brien <mobrien@vyatta.com> Sat, 19 Apr 2008 11:56:32 -0700
vyatta-wanloadbalance (0.5) unstable; urgency=low
VC4.0.2 release candidate
[ Mark O'Brien ]
[ Stephen Hemminger ]
* validate interface name in template
* allow vlan for load-balancing interface
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Wed, 16 Apr 2008 09:50:33 -0700
vyatta-wanloadbalance (0.4) unstable; urgency=low
3.0.2
[ Mark O'Brien ]
* 3.0.1
[ Michael Larson ]
* modified configuration to mirror nat/firewall for port/address
configuration. added port configuration support for common port
* added final validation to address ranges and negation operators. now
behavior is the same as firewall and nat.
* removed network from configuration. changed configuration error
without valid rule to warning. fixed up path to iptables for status
show command.
[ rbalocca ]
* Fix debian dependencies
* Set dependencies on either bash or vyatta-bash
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Fri, 04 Apr 2008 18:01:25 -0700
vyatta-wanloadbalance (0.3) unstable; urgency=low
VC4.0.1
[ Mark O'Brien ]
[ Michael Larson ]
* changed Wan to WAN in show command when not configured.
* fix for 2951. checks for at least one interface with ping target and
one rule with an interface defined.
[ Stephen Hemminger ]
* convert from VPL to GPLv2
* update from VPL1 to GPLv2
[ rbalocca ]
* Fix upgrade of wanloadbalance
* postrm script was failing
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Tue, 18 Mar 2008 19:05:20 -0700
vyatta-wanloadbalance (0.2) unstable; urgency=low
vc4.0.0
[ Mark O'Brien ]
[ Michael Larson ]
* added init script
* more minor project modifications
* asdf
* fix debian files so pkg is created correctly
* more package mods--added conf file, removed configuration files that
shouldn't be part of this package.
* initial checkin of skeletal cli commands for wan load-balancing,
plus other packaging changes.
* checkin of cli commands for wan loadbalancing. some cleanup of the
project--more cli work to follow...
* additional changes to go with last push
* numerous changes: added help, added init script, modified source to
support daemon and pid creation, fixed conf file creation when
* moved most stdout messages to new debug output command. reworked
(simplified) init script so that rules table is properly cleaned
* fixed postinst for init script,+ other cleanup
* fixed up node.def files as per an-cheng's changes. more pkg stuff
for the init script. added default values.
* init script fix. set up show commands. create output file for wan lb
status and provide show status cmd.
* processing added to compute elapsed time in pretty output format for
show commands. time since last failure/success per
* whole raft of cli related changes. Fixed bugs in display output--
added error checking on some configuration combinations. added
* added status command, more cli bugfixes and postinst fix.
* changed port definition to be consistent with fw/nat (i.e. single
port line allow multi-port configuration). init script fix
* missing bracket in conf file creation.
* more install stuff--
* added back status command to inst instructions.
* fix for post instruction for status show cmd
* fixed errors introduced when converting to new port definitions.
* fixing installation of init script.
* more cleanup.
* added postinst instruction for moving show cmds.
* fix for bug 2780.
* more packaging tweaks and bugfixes.
* fixed init script for no start argument provided for configuration
file. def is /var/load-balance/wlb.con
* stop wan lb process on delete of load-balance node.
* provide help string at root of load-balancing configuration.
* fix for bug 2781. sudo needed for non-root login for file operations
* non-root support for status op cmd
* fix for bug 2841. wanloadbalance is started on configuration, and on
load of configuration (including boot
* added vyatta-wanloadbalance.init
* suppress stderr from commit.
* fix postrm install script to point to current init script
* cli specifies timeout value in seconds--conf takes value in
milliseconds. Need to multiple cli value by
* add check in cli for both address and network configured--in this
case generate configuration error.
* fixed bug where protocol is all or icmp and source/destination
address/network are set. address/network were being ignore--now
* clean up cosmetics in help
* critical fix for bug 2882 :)
[ rbalocca ]
* Remove derived files
* Add derived files to .gitignore
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Mon, 25 Feb 2008 17:40:18 -0800
vyatta-wanloadbalance (0.1) unstable; urgency=low
* Initial Release.
-- Michael Larson <mike@vyatta.com> Fri, 14 Dec 2007 17:31:53 -0700
|