| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | peer-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -8/+12 |
| | | |||||
| * | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -12/+12 |
| | | |||||
| * | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -7/+7 |
| | | |||||
| * | libhydra: Move kernel interface to libcharon | Tobias Brunner | 2016-03-03 | 1 | -7/+6 |
| | | | | | This moves hydra->kernel_interface to charon->kernel. | ||||
| * | load-tester: Support initiating XAuth authentication | Martin Willi | 2015-02-20 | 1 | -0/+22 |
| | | | | | | | | | As with other configuration backends, XAuth is activated with a two round client authentication using pubkey and xauth. In load-tester, this is configured with initiator_auth=pubkey|xauth. Fixes #835. | ||||
| * | mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth | Martin Willi | 2015-02-20 | 1 | -1/+1 |
| | | | | | | | | | | | | With make-before-break IKEv2 re-authentication, virtual IP addresses must be assigned overlapping to the same peer. With the remote IKE address, the backend can detect re-authentication attempts by comparing the remote host address and port. This allows proper reassignment of the virtual IP if it is re-requested. This change removes the mem-pool.reassign_online option, as it is obsolete now. IPs get automatically reassigned if a peer re-requests the same address, and additionally connects from the same address and port. | ||||
| * | load-tester: Fix race condition issuing same identity | Christophe Gouault | 2014-04-24 | 1 | -2/+2 |
| | | | | | | | | | | | Due to an unprotected incrementation, two load-tester initiators occasionally use the same identifier under high load. The responder typically drops one of the connections. Use an atomic incrementation to avoid this race condition. Signed-off-by: Christophe Gouault <christophe.gouault@6wind.com> | ||||
| * | libcharon: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 1 | -29/+28 |
| | | |||||
| * | Fixed some typos | Tobias Brunner | 2013-10-29 | 1 | -1/+1 |
| | | |||||
| * | load-tester: support extended traffic selector syntax, as in leftsubnet | Martin Willi | 2013-09-04 | 1 | -13/+168 |
| | | | | | | In addition the initiator may use %unique as port, using a distinct port for each connection, starting from 1025. | ||||
| * | load-tester: add an option to test transport/beet connections | Martin Willi | 2013-09-04 | 1 | -1/+21 |
| | | |||||
| * | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -5/+4 |
| | | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
| * | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -1/+1 |
| | | |||||
| * | Use strpfx() helper where appropriate | Tobias Brunner | 2013-07-08 | 1 | -1/+1 |
| | | |||||
| * | Add a load-tester option to keep allocated external address until shutdown | Martin Willi | 2013-03-21 | 1 | -0/+50 |
| | | |||||
| * | Add an "esp" load-tester option to configure custom CHILD_SA ESP proposal | Martin Willi | 2013-03-18 | 1 | -3/+16 |
| | | |||||
| * | Support mutliple subnets and ranges as external load-tester addresses | Martin Willi | 2013-03-11 | 1 | -15/+59 |
| | | |||||
| * | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -1/+1 |
| |\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| | * | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -1/+1 |
| | | | |||||
| * | | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -2/+2 |
| |/ | |||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -2/+4 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -2/+2 |
| | | |||||
| * | If load-tester requests a virtual IP, use a dynamic local traffic selector | Martin Willi | 2012-12-17 | 1 | -2/+8 |
| | | |||||
| * | Store load-tester address leases in a hashtable for fast removal | Martin Willi | 2012-11-29 | 1 | -24/+81 |
| | | |||||
| * | Don't wait while removing external IPs used for load testing | Martin Willi | 2012-11-29 | 1 | -1/+1 |
| | | |||||
| * | Install virtual IPs via interface name, and use an interface lookup where ↵ | Martin Willi | 2012-11-29 | 1 | -29/+13 |
| | | | | | required | ||||
| * | load-tester can dynamically install a dedicated external IP for each IKE_SA | Martin Willi | 2012-11-29 | 1 | -12/+187 |
| | | | | | | | | For consistency, the local/remote parameters have been replaced by the initiator/responder options. As initiator, the initiator option can be overriden by an addrs section taking key/value pairs with address pools to use on a specific interface. | ||||
| * | Send certificate requests in load-tester | Martin Willi | 2012-10-24 | 1 | -2/+2 |
| | | |||||
| * | Add load-tester traffic selector configuration options | Martin Willi | 2012-10-24 | 1 | -5/+67 |
| | | |||||
| * | Add a load-tester option to define the IKE version to use for testing | Martin Willi | 2012-10-24 | 1 | -2/+9 |
| | | |||||
| * | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -3/+4 |
| | | |||||
| * | Add a load-tester initiator_match option to match custom initiator_id | Martin Willi | 2012-10-16 | 1 | -2/+15 |
| | | |||||
| * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+5 |
| | | |||||
| * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -1/+4 |
| | | |||||
| * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | |||||
| * | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | | | | configurable. | ||||
| * | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -2/+4 |
| | | |||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+9 |
| | | |||||
| * | Load tester can enforce a local IP to use | Martin Willi | 2012-05-14 | 1 | -2/+9 |
| | | |||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -13/+14 |
| | | | | | Also fixes several whitespace errors. | ||||
| * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+2 |
| | | |||||
| * | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 |
| | | | | | Replaced all those magic numbers. | ||||
| * | Added a DPD option for load-tester | Martin Willi | 2011-05-16 | 1 | -1/+8 |
| | | |||||
| * | Added initiator/responder_id load tester options to enforce different identities | Martin Willi | 2011-05-16 | 1 | -30/+73 |
| | | |||||
| * | Migrated load_tester_config to INIT/METHOD macros | Martin Willi | 2011-05-16 | 1 | -28/+22 |
| | | |||||
| * | Revert alloc_str changes | Martin Willi | 2011-04-21 | 1 | -8/+4 |
| | | | | | | | This reverts commit fdead26ffe1da8501a6ff5e0639a6f44c723e763. This reverts commit 3e2419ebe32de72d824864eb2e0e677a7c197af1. This reverts commit 17ce69b47a1efd6234960cf7d1f50712aee61db5. | ||||
| * | Use thread save settings alloc_str function where appropriate | Martin Willi | 2011-04-21 | 1 | -4/+8 |
| | | |||||
| * | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 1 | -1/+1 |
| | | |||||
| * | start and route connections defined in an SQL database via start_action ↵ | Andreas Steffen | 2010-11-28 | 1 | -2/+2 |
| | | | | | field and ipsec up %startall command | ||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |