Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Proxy protocol #923

Merged
merged 21 commits into from
Dec 8, 2023
Merged

Proxy protocol #923

merged 21 commits into from
Dec 8, 2023

Commits on Dec 8, 2023

  1. route: remove fragile implementation of strategy routing codes for snat 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    6b23bdc View commit details
    Browse the repository at this point in the history

  2. keepalived: fix dpvs crash problem in issue #911 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    6d8161e View commit details
    Browse the repository at this point in the history

  3. test: add demo servers for proxy protocol 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    f2ff83a View commit details
    Browse the repository at this point in the history

  4. ipvs: support proxy protocol config 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    bbf9b98 View commit details
    Browse the repository at this point in the history

  5. ipvs: proxy protocol implementation

    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    bdec65f View commit details
    Browse the repository at this point in the history

  6. tools: add supports for proxy protocol 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    5ece4a6 View commit details
    Browse the repository at this point in the history

  7. keepalived: fix a crash problem caused by the missing allowlist/denylist 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    8fb267e View commit details
    Browse the repository at this point in the history

  8. healtcheck: upd_check supports ppv2 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    9cb7db6 View commit details
    Browse the repository at this point in the history

  9. test: fix serveral trivial problems in proxy protocol test programs 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    098d25c View commit details
    Browse the repository at this point in the history

  10. ipvs: fix problems found in debug of proxy protocol implementation 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    070cbd0 View commit details
    Browse the repository at this point in the history

  11. ipvs: fix standalone tcp proxy protocol packet sent problem

    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    1b23ef6 View commit details
    Browse the repository at this point in the history

  12. ipvs: forbid sending proxy protocol data in pure tcp ack packets 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    85dffff View commit details
    Browse the repository at this point in the history

  13. ipvs: fix serveral problems in sending standalone proxy protocol packets 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    0ef9c86 View commit details
    Browse the repository at this point in the history

  14. ipvs: fix dozens of problems found in proxy protocol cascading test 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    9845528 View commit details
    Browse the repository at this point in the history

  15. test: add test checklist for proxy protocol 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    e09136f View commit details
    Browse the repository at this point in the history

  16. ipvs: fix issues in proxy protocol v2 parsing

    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    a4b6f0e View commit details
    Browse the repository at this point in the history

  17. test: update checklist for proxy protocol

    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    be5ff4c View commit details
    Browse the repository at this point in the history

  18. tools: add more supports for proxy protocol 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    bf67945 View commit details
    Browse the repository at this point in the history

  19. tools: dpvs-agent supports proxy protocol config 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    c3a6e8e View commit details
    Browse the repository at this point in the history

  20. doc: add doc client-address-conservation-in-fullnat.md 

    Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    be04eff View commit details
    Browse the repository at this point in the history

  21. ipvs: protect proxy protocol from source address spoofing attack 

    Two versions -- v1-insecure and v2-insecure -- ared added for the proxy cascading
case where the proxy protocol addresses should remain unchanged in the backend
proxy server. Meanwhile, the v1 and v2 versions are always using the addresses
from client's ip header of inbound packets.

Signed-off-by: ywc689 <[email protected]>
    @ywc689
    ywc689 committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    5c5aace View commit details
    Browse the repository at this point in the history