|
From: <sar...@us...> - 2012-11-16 04:52:40
|
Revision: 250
http://openhip.svn.sourceforge.net/openhip/?rev=250&view=rev
Author: sarabito
Date: 2012-11-16 04:52:34 +0000 (Fri, 16 Nov 2012)
Log Message:
-----------
In order to tolerate occassional unknown SPIs (e.g. during HIP UPDATES), add tracking for unknown SPIs in hip_esp_input. This works in conjunction with the icmp_timeout option. Unknown SPIs are kept in a list along with the time they are seen. Once icmp_timeout has elapsed, and a subsequent ESP packet with that unknown SPI is received, an icmp packet will be sent to the peer. Unknown SPIs are expired from this list after icmp_timeout * max_retries seconds has elapsed. This tracking also has the effect of rate-limiting the icmp packets to once per icmp_timeout. Note again that packets with the unknown SPI need to be received once to mark the first time received and again after icmp_timeout to actually send the icmp.
Modified Paths:
--------------
hip/trunk/src/include/hip/hip_types.h
hip/trunk/src/usermode/hip_esp.c
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <sar...@us...> - 2012-11-18 17:45:46
|
Revision: 253
http://openhip.svn.sourceforge.net/openhip/?rev=253&view=rev
Author: sarabito
Date: 2012-11-18 17:45:38 +0000 (Sun, 18 Nov 2012)
Log Message:
-----------
Prevent resource exhaustion (DoS) from tracking unknown SPIs by limiting the number that can be tracked at any given time.
Modified Paths:
--------------
hip/trunk/src/include/hip/hip_types.h
hip/trunk/src/usermode/hip_esp.c
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <sar...@us...> - 2012-11-18 17:52:46
|
Revision: 254
http://openhip.svn.sourceforge.net/openhip/?rev=254&view=rev
Author: sarabito
Date: 2012-11-18 17:52:39 +0000 (Sun, 18 Nov 2012)
Log Message:
-----------
Rename variables used to track unknown SPIs - was calling them lost and really they are unknown.
Modified Paths:
--------------
hip/trunk/src/include/hip/hip_types.h
hip/trunk/src/usermode/hip_esp.c
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <sil...@us...> - 2012-12-17 20:05:23
|
Revision: 257
http://openhip.svn.sourceforge.net/openhip/?rev=257&view=rev
Author: siliconja
Date: 2012-12-17 20:05:17 +0000 (Mon, 17 Dec 2012)
Log Message:
-----------
patch by Tom H. to allow specifying LSI prefix in hip.conf file
modified by Jeff A. to work under Windows and to fix LSI generated with hitgen
Modified Paths:
--------------
hip/trunk/src/include/hip/hip_funcs.h
hip/trunk/src/include/hip/hip_sadb.h
hip/trunk/src/include/hip/hip_types.h
hip/trunk/src/include/hip/hip_usermode.h
hip/trunk/src/linux/hip_linux_umh.c
hip/trunk/src/protocol/hip_main.c
hip/trunk/src/usermode/hip_esp.c
hip/trunk/src/usermode/hip_nl.c
hip/trunk/src/util/hip_xml.c
hip/trunk/src/util/hitgen.c
hip/trunk/src/util/scripts/bridge_up.sh
hip/trunk/src/win32/hip_service.c
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <sil...@us...> - 2014-04-15 20:17:12
|
Revision: 258
http://sourceforge.net/p/openhip/code/258
Author: siliconja
Date: 2014-04-15 20:17:08 +0000 (Tue, 15 Apr 2014)
Log Message:
-----------
unbreak "--enable-vpls=files" build from r257 LSI patch
Revision Links:
--------------
http://sourceforge.net/p/openhip/code/257
Modified Paths:
--------------
hip/trunk/src/include/hip/hip_globals.h
hip/trunk/src/util/cfg-common/hip_cfg.cpp
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <sil...@us...> - 2014-04-21 22:34:59
|
Revision: 260
http://sourceforge.net/p/openhip/code/260
Author: siliconja
Date: 2014-04-21 22:34:56 +0000 (Mon, 21 Apr 2014)
Log Message:
-----------
added support for configuring a static multicast SA for VPLS mode
The static multicast SA introduces "multicast_group", "multicast_spi", and
"multicast_key" options to hip.conf; peers must be configured with a matching
group/SPI/key combination.
When multicast packets are received from the overlay, instead of unicasting a
copy through each established tunnel, the static key/SPI is used and an ESP
packet is sent out to the configured group. This means multicast is sent
as multicast (multiple groups mapped to one), not as unicast, having different
implications for how the ESP is routed over the underlay network.
Modified Paths:
--------------
hip/trunk/src/include/hip/hip_types.h
hip/trunk/src/usermode/hip_esp.c
hip/trunk/src/util/hip_xml.c
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <sil...@us...> - 2014-05-05 22:50:03
|
Revision: 261
http://sourceforge.net/p/openhip/code/261
Author: siliconja
Date: 2014-05-05 22:50:00 +0000 (Mon, 05 May 2014)
Log Message:
-----------
fix bug #72 - traffic during startup causes unusable daemon and garbage
now the ESP socket pair is initialized prior to starting threads
an uninitialized espsp[0] was used, causing esp_send_to_hipd() to write()
to file descriptor 0 (causing the garbled output on stdout)
the buffer_packet() function added an LSI entry preventing further
ACQUIRE messages, and therefore no base exchange or traffic,
until 2 minutes later when hip_remove_expired_lsi_entries() expired the entry
Modified Paths:
--------------
hip/trunk/src/linux/hip_linux_umh.c
hip/trunk/src/protocol/hip_globals.c
hip/trunk/src/protocol/hip_main.c
hip/trunk/src/usermode/hip_esp.c
hip/trunk/src/win32/hip_service.c
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <tom...@us...> - 2016-09-10 00:35:21
|
Revision: 262
http://sourceforge.net/p/openhip/code/262
Author: tom_henderson
Date: 2016-09-10 00:35:20 +0000 (Sat, 10 Sep 2016)
Log Message:
-----------
fix invalid memsets
Modified Paths:
--------------
hip/trunk/src/protocol/hip_ipsec.c
hip/trunk/src/protocol/hip_main.c
hip/trunk/src/protocol/hip_output.c
hip/trunk/src/util/hip_util.c
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|