Nikos Mavrogiannopoulos
|
cb5499a6b7
|
only define safe_fork() in systems with linux namespaces
|
2015-01-19 10:49:01 +01:00 |
|
Nikos Mavrogiannopoulos
|
c954e45e53
|
silence debugging messages from sec-mod when not in debug
|
2015-01-18 17:34:59 +01:00 |
|
Nikos Mavrogiannopoulos
|
5179a064ab
|
doc update
|
2015-01-18 16:51:34 +01:00 |
|
Nikos Mavrogiannopoulos
|
310855cb7c
|
move more http-related functions to worker-http
|
2015-01-16 11:55:17 +01:00 |
|
Nikos Mavrogiannopoulos
|
6d1f848e1d
|
updated copyright information in LZS code
|
2015-01-16 11:17:52 +01:00 |
|
Nikos Mavrogiannopoulos
|
0638d85631
|
combined parsing of CSTP and DTLS encoding
|
2015-01-16 11:12:16 +01:00 |
|
Nikos Mavrogiannopoulos
|
4a372f4e05
|
Replace header_check() mess with a gperf table
|
2015-01-16 11:07:10 +01:00 |
|
Nikos Mavrogiannopoulos
|
dcf47899e0
|
Moved HTTP parts of worker to worker-http.c
|
2015-01-16 10:56:35 +01:00 |
|
Nikos Mavrogiannopoulos
|
04a9381068
|
Compression is disabled by default
|
2015-01-16 10:45:53 +01:00 |
|
Nikos Mavrogiannopoulos
|
8dd56e69c8
|
doc update
|
2015-01-16 10:33:33 +01:00 |
|
Nikos Mavrogiannopoulos
|
d3159c6973
|
lzs.h: added license
|
2015-01-16 10:23:00 +01:00 |
|
Nikos Mavrogiannopoulos
|
1bbef9662d
|
doc update
|
2015-01-15 23:02:00 +01:00 |
|
Nikos Mavrogiannopoulos
|
85d3162f45
|
Added support for LZS
|
2015-01-15 22:58:17 +01:00 |
|
Nikos Mavrogiannopoulos
|
8d2a562af1
|
increased MIN_NO_COMPRESS_LIMIT
|
2015-01-15 21:00:32 +01:00 |
|
Nikos Mavrogiannopoulos
|
724cfef3d4
|
tests: install lz4 on docker images
|
2015-01-15 20:28:58 +01:00 |
|
Nikos Mavrogiannopoulos
|
eddb0b9297
|
fixed compression to use the correct start of buffer
|
2015-01-15 20:21:10 +01:00 |
|
Nikos Mavrogiannopoulos
|
24f348226f
|
only enforce undumpable if we are not debugging
|
2015-01-15 19:18:59 +01:00 |
|
Nikos Mavrogiannopoulos
|
6f714d6f2e
|
report the compression algorithms to occtl
|
2015-01-15 19:04:43 +01:00 |
|
Nikos Mavrogiannopoulos
|
048b25ba45
|
Made the no-compress-limit configurable
|
2015-01-15 18:31:33 +01:00 |
|
Nikos Mavrogiannopoulos
|
67f621976b
|
Allow compression to fail, and in that case send uncompressed packets
That allows to cancel compression early, if it seems to expand the
packet. Suggested by David Woodhouse.
|
2015-01-15 17:43:48 +01:00 |
|
Nikos Mavrogiannopoulos
|
7f997cc3fc
|
only transmit a compressed packet, if it reduces the size
|
2015-01-15 17:13:26 +01:00 |
|
Nikos Mavrogiannopoulos
|
2719c00281
|
doc update
|
2015-01-15 16:43:11 +01:00 |
|
Nikos Mavrogiannopoulos
|
27168673f0
|
added option to disable compression
|
2015-01-15 16:42:29 +01:00 |
|
Nikos Mavrogiannopoulos
|
850181ed4e
|
Moved negotiation/parsing of parameters using HTTP headers to worker-extras.c
|
2015-01-15 16:42:17 +01:00 |
|
Nikos Mavrogiannopoulos
|
3c023ffe5e
|
Added support for LZ4 compression
|
2015-01-15 16:39:36 +01:00 |
|
Nikos Mavrogiannopoulos
|
831abcb76d
|
corrected typo
|
2015-01-15 16:34:58 +01:00 |
|
Nikos Mavrogiannopoulos
|
6ece4ef2e6
|
doc update
|
2015-01-15 10:26:55 +01:00 |
|
Nikos Mavrogiannopoulos
|
fe848ad153
|
replaced use-seccomp by isolate-workers
That, if enabled, includes the Linux namespaces restrictions into workers.
|
2015-01-15 10:25:23 +01:00 |
|
Nikos Mavrogiannopoulos
|
7a51462abd
|
reorganized to avoid compiler warnings
|
2015-01-15 09:59:38 +01:00 |
|
Nikos Mavrogiannopoulos
|
65a4646d2f
|
include linux/sched.h to compile on systems with older libc
|
2015-01-15 09:55:51 +01:00 |
|
Nikos Mavrogiannopoulos
|
8b65df1ce3
|
remove the CLONE_NEWNET isolation option as it's performance cost is too high
|
2015-01-14 21:05:19 +01:00 |
|
Nikos Mavrogiannopoulos
|
8989be49ef
|
typo fix
|
2015-01-14 17:47:44 +01:00 |
|
Nikos Mavrogiannopoulos
|
35d609cfc8
|
tests: remove all error file references from haproxy.cfg
These files don't exist in Fedora.
|
2015-01-14 17:08:01 +01:00 |
|
Nikos Mavrogiannopoulos
|
180a3f468c
|
doc update
|
2015-01-14 17:08:01 +01:00 |
|
Nikos Mavrogiannopoulos
|
4dee583e29
|
In linux run the server in it's own container with separate IPC and PID namespace
|
2015-01-14 17:08:01 +01:00 |
|
Nikos Mavrogiannopoulos
|
1740a3aaf0
|
tests: attempt to use lockfile-create if it exists
|
2015-01-14 17:08:01 +01:00 |
|
Nikos Mavrogiannopoulos
|
b124f68f12
|
do not allow the processes to be traced in linux
That would prevent a worker process tracing one
from another user.
|
2015-01-13 22:44:08 +01:00 |
|
Nikos Mavrogiannopoulos
|
a02dbb1fb2
|
removed unneeded variable
|
2015-01-12 10:53:47 +01:00 |
|
Nikos Mavrogiannopoulos
|
9f619b3a79
|
corrected check for non-empty pull buffer
|
2015-01-12 10:50:10 +01:00 |
|
Nikos Mavrogiannopoulos
|
4a56dd95c9
|
prevent a memory leak when multiple fds are received in short time
|
2015-01-12 10:45:37 +01:00 |
|
Nikos Mavrogiannopoulos
|
8c24dd8dd7
|
occtl: re-arranged user-agent and MTU printing
|
2015-01-11 12:42:08 +01:00 |
|
Nikos Mavrogiannopoulos
|
9477340b86
|
added more precise match of version
|
2015-01-11 12:40:04 +01:00 |
|
Nikos Mavrogiannopoulos
|
406c171069
|
avoid repeating username in logs
|
2015-01-11 12:28:01 +01:00 |
|
Nikos Mavrogiannopoulos
|
2f3d520c85
|
do not enforce PFS on default strings
That allows legacy clients connect.
|
2015-01-11 12:22:27 +01:00 |
|
Nikos Mavrogiannopoulos
|
c3417f0830
|
simplified DTLS fd handling and dtls_pull()
|
2015-01-11 11:40:22 +01:00 |
|
Nikos Mavrogiannopoulos
|
a04599afc8
|
always forward the first message when forwarding fd
|
2015-01-11 11:33:44 +01:00 |
|
Nikos Mavrogiannopoulos
|
41d61c4225
|
cleanups
|
2015-01-11 11:27:06 +01:00 |
|
Nikos Mavrogiannopoulos
|
286ea8ff7b
|
only set IPV6_RECVPKTINFO on IPv6 sockets
|
2015-01-11 10:57:02 +01:00 |
|
Nikos Mavrogiannopoulos
|
a4c2967e02
|
simplified forward_udp_to_owner() by introducing oc_recvfrom_at()
|
2015-01-11 10:53:29 +01:00 |
|
Nikos Mavrogiannopoulos
|
04ec372f4f
|
save MTU in main, and report it to occtl
|
2015-01-11 10:34:13 +01:00 |
|