From: Simon Horman <horms@verge.net.au> Date: 2011-10-01 03:34:17
Hi Pablo,
please consider pulling the following to get some
documentation changes from myself.
The following changes since commit 6fa4dec85e199f31774faf29be26a53329d02e9e:
ipvs: Removed unused variables (2011-09-28 21:09:24 +0200)
are available in the git repository at:
git@github.com:horms/ipvs-next.git master
Simon Horman (2):
IPVS: secure_tcp does provide alternate state timeouts
IPVS: Enhance grammar used to refer to Kconfig options
Documentation/networking/ipvs-sysctl.txt | 14 ++++++--------
1 files changed, 6 insertions(+), 8 deletions(-)
From: Simon Horman <horms@verge.net.au> Date: 2011-10-01 03:34:18
* Also reword the test to make it read more easily (to me)
Signed-off-by: Simon Horman <horms@verge.net.au>
---
Julian, I don't see that IPVS currently implements alternate
timeouts for secure_tcp. Am I missing something?
---
Documentation/networking/ipvs-sysctl.txt | 10 ++++------
1 files changed, 4 insertions(+), 6 deletions(-)
@@ -140,13 +140,11 @@ nat_icmp_send - BOOLEAN secure_tcp - INTEGER 0 - disabled (default)- The secure_tcp defense is to use a more complicated state- transition table and some possible short timeouts of each- state. In the VS/NAT, it delays the entering the ESTABLISHED- until the real server starts to send data and ACK packet- (after 3-way handshake).+ The secure_tcp defense is to use a more complicated TCP state+ transition table. For VS/NAT, it also delays entering the+ TCP ESTABLISHED state until the three way handshake is completed.- The value definition is the same as that of drop_entry or+ The value definition is the same as that of drop_entry and drop_packet. sync_threshold - INTEGER
@@ -30,7 +30,7 @@ conntrack - BOOLEAN Connections handled by the IPVS FTP application module will have connection tracking entries regardless of this setting.- Only available when IPVS is compiled with the CONFIG_IP_VS_NFCT+ Only available when IPVS is compiled with CONFIG_IP_VS_NFCT enabled. cache_bypass - BOOLEAN 0 - disabled (default)
@@ -56,7 +56,7 @@ debug_level - INTEGER 11 - IPVS packet handling (ip_vs_in/ip_vs_out) 12 or more - packet traversal- Only available when IPVS is compiled with the CONFIG_IP_VS_DEBUG+ Only available when IPVS is compiled with CONFIG_IP_VS_DEBUG enabled. Higher debugging levels include the messages for lower debugging levels, so setting debug level 2, includes level 0, 1 and 2
From: Pablo Neira Ayuso <pablo@netfilter.org> Date: 2011-10-10 23:42:56
On Sat, Oct 01, 2011 at 12:34:17PM +0900, Simon Horman wrote:
Hi Pablo,
please consider pulling the following to get some
documentation changes from myself.
The following changes since commit 6fa4dec85e199f31774faf29be26a53329d02e9e:
ipvs: Removed unused variables (2011-09-28 21:09:24 +0200)
are available in the git repository at:
git@github.com:horms/ipvs-next.git master
Simon Horman (2):
IPVS: secure_tcp does provide alternate state timeouts
IPVS: Enhance grammar used to refer to Kconfig options
Documentation/networking/ipvs-sysctl.txt | 14 ++++++--------