Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth | Martin Willi | 2015-02-20 | 1 | -6/+7 |
| | | | | | | | | | | | With make-before-break IKEv2 re-authentication, virtual IP addresses must be assigned overlapping to the same peer. With the remote IKE address, the backend can detect re-authentication attempts by comparing the remote host address and port. This allows proper reassignment of the virtual IP if it is re-requested. This change removes the mem-pool.reassign_online option, as it is obsolete now. IPs get automatically reassigned if a peer re-requests the same address, and additionally connects from the same address and port. | ||||
* | attribute-provider: Pass full IKE_SA to provider backends | Martin Willi | 2015-02-20 | 1 | -5/+9 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Check for an existing lease in all stroke pools before creating a new one | Martin Willi | 2012-09-11 | 1 | -7/+31 |
| | |||||
* | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 1 | -4/+16 |
| | |||||
* | Pass the full list of pools to acquire_address, enumerate in providers | Martin Willi | 2012-09-11 | 1 | -4/+16 |
| | | | | | | | | If the provider has access to the full pool list, it can enumerate them twice, for example to search for existing leases first, and only search for new leases in a second step. Fixes lease enumeration in attr-sql using multiple pools. | ||||
* | Print the name of mem pools instead of the confusing <base>/<size> | Tobias Brunner | 2012-09-10 | 1 | -2/+4 |
| | |||||
* | Pass all configured pool names to attribute provider enumerator | Martin Willi | 2012-08-30 | 1 | -2/+2 |
| | |||||
* | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Support multiple addresses/pools in left/rightsourceip | Martin Willi | 2012-08-30 | 1 | -37/+44 |
| | |||||
* | Serve ipsec.conf rightdns servers through stroke attribute provider | Martin Willi | 2012-08-21 | 1 | -10/+143 |
| | |||||
* | Use a read-write lock in stroke_attribute to increase concurrency. | Tobias Brunner | 2010-04-06 | 1 | -19/+19 |
| | |||||
* | Migrated stroke_attribute_t to METHOD/INIT macros. | Tobias Brunner | 2010-04-06 | 1 | -45/+35 |
| | |||||
* | Extracted in-memory IP address pool from stroke plugin to libhydra. | Tobias Brunner | 2010-04-06 | 1 | -347/+37 |
| | |||||
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -0/+546 |