Automatic report from sources (radiusd) between 13.06.2008 - 14.06.2008 GMT
CVS log entries from 13.06.2008 (Fri) 08:00:00 - 14.06.2008 (Sat) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/raddb/sites-available/dynamic-clients; Revisions: 1.1 File: radiusd/src/main/mainconfig.c; Revisions: 1.153 File: radiusd/src/main/listen.c; Revisions: 1.127 File: radiusd/src/main/client.c; Revisions: 1.83 File: radiusd/share/dictionary.freeradius.internal; Revisions: 1.28 File: radiusd/src/include/radiusd.h; Revisions: 1.271 File: radiusd/doc/ChangeLog; Revisions: 1.98 File: radiusd/share/dictionary.3gpp2; Revisions: 1.7 File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.182 ===================================================== Combined list of identical log entries ===================================================== Description: The feature everyone's been waiting for. Modified files: File: radiusd/raddb/sites-available/dynamic-clients; Revision: 1.1; Date: 2008/06/13 12:30:06; Author: aland; File: radiusd/share/dictionary.freeradius.internal; Revision: 1.28; Date: 2008/06/13 12:30:06; Author: aland; Lines: (+13 -1) File: radiusd/src/include/radiusd.h; Revision: 1.271; Date: 2008/06/13 12:30:07; Author: aland; Lines: (+18 -2) File: radiusd/src/main/client.c; Revision: 1.83; Date: 2008/06/13 12:30:07; Author: aland; Lines: (+230 -3) File: radiusd/src/main/listen.c; Revision: 1.127; Date: 2008/06/13 12:30:07; Author: aland; Lines: (+141 -3) File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.182; Date: 2008/06/13 12:30:07; Author: aland; Lines: (+6 -2) ===================================================== Log entries ===================================================== Description: Note dynamic clients Modified files: File: radiusd/doc/ChangeLog; Revision: 1.98; Date: 2008/06/13 14:08:24; Author: aland; Lines: (+7 -1) ------------------------------- Description: Added more attributes, as per bug #561 Modified files: File: radiusd/share/dictionary.3gpp2; Revision: 1.7; Date: 2008/06/13 17:32:41; Author: aland; Lines: (+6 -1) ------------------------------- Description: Added "security" section back. Closes #566 Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.153; Date: 2008/06/13 17:27:41; Author: aland; Lines: (+4 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.98 Authors: aland (+7 -1) ------------------------------- File: radiusd/raddb/sites-available/dynamic-clients Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/share/dictionary.3gpp2 Revisions: 1.7 Authors: aland (+6 -1) ------------------------------- File: radiusd/share/dictionary.freeradius.internal Revisions: 1.28 Authors: aland (+13 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.271 Authors: aland (+18 -2) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.83 Authors: aland (+230 -3) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.127 Authors: aland (+141 -3) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.153 Authors: aland (+4 -2) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.182 Authors: aland (+6 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl
Excellent ! Wow this is such a neat way of doing it. Don't reload the entire client table every time there's an update, just provide provision for bringing new clients into the list dynamically until we get a chance to reload the client list properly. Hmm... though because we see such large startup times when loading in clients from SQL, it'd be nice to be able to turn that DoS protection off, and just run the whole setup using dynamic clients, I dare say it'd save quite a bit of memory too (currently loading 600+ NAS). Did you include client assignment to virtual-servers, I don't see an attribute listed in the example...? Many Thanks, Arran On 14 Jun 2008, at 09:02, Automatic cvs log generator wrote:
CVS log entries from 13.06.2008 (Fri) 08:00:00 - 14.06.2008 (Sat) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/raddb/sites-available/dynamic-clients; Revisions: 1.1 File: radiusd/src/main/mainconfig.c; Revisions: 1.153 File: radiusd/src/main/listen.c; Revisions: 1.127 File: radiusd/src/main/client.c; Revisions: 1.83 File: radiusd/share/dictionary.freeradius.internal; Revisions: 1.28 File: radiusd/src/include/radiusd.h; Revisions: 1.271 File: radiusd/doc/ChangeLog; Revisions: 1.98 File: radiusd/share/dictionary.3gpp2; Revisions: 1.7 File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.182
===================================================== Combined list of identical log entries ===================================================== Description: The feature everyone's been waiting for. Modified files: File: radiusd/raddb/sites-available/dynamic-clients; Revision: 1.1; Date: 2008/06/13 12:30:06; Author: aland; File: radiusd/share/dictionary.freeradius.internal; Revision: 1.28; Date: 2008/06/13 12:30:06; Author: aland; Lines: (+13 -1) File: radiusd/src/include/radiusd.h; Revision: 1.271; Date: 2008/06/13 12:30:07; Author: aland; Lines: (+18 -2) File: radiusd/src/main/client.c; Revision: 1.83; Date: 2008/06/13 12:30:07; Author: aland; Lines: (+230 -3) File: radiusd/src/main/listen.c; Revision: 1.127; Date: 2008/06/13 12:30:07; Author: aland; Lines: (+141 -3) File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.182; Date: 2008/06/13 12:30:07; Author: aland; Lines: (+6 -2) ===================================================== Log entries ===================================================== Description: Note dynamic clients Modified files: File: radiusd/doc/ChangeLog; Revision: 1.98; Date: 2008/06/13 14:08:24; Author: aland; Lines: (+7 -1) ------------------------------- Description: Added more attributes, as per bug #561 Modified files: File: radiusd/share/dictionary.3gpp2; Revision: 1.7; Date: 2008/06/13 17:32:41; Author: aland; Lines: (+6 -1) ------------------------------- Description: Added "security" section back. Closes #566 Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.153; Date: 2008/06/13 17:27:41; Author: aland; Lines: (+4 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.98 Authors: aland (+7 -1) ------------------------------- File: radiusd/raddb/sites-available/dynamic-clients Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/share/dictionary.3gpp2 Revisions: 1.7 Authors: aland (+6 -1) ------------------------------- File: radiusd/share/dictionary.freeradius.internal Revisions: 1.28 Authors: aland (+13 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.271 Authors: aland (+18 -2) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.83 Authors: aland (+230 -3) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.127 Authors: aland (+141 -3) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.153 Authors: aland (+4 -2) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.182 Authors: aland (+6 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/ new_makelog.pl - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Arran Cudbard-Bell wrote:
Wow this is such a neat way of doing it. Don't reload the entire client table every time there's an update, just provide provision for bringing new clients into the list dynamically
Yup.
until we get a chance to reload the client list properly.
Nope. If they client is loaded dynamically, it's in the list "properly". There is no difference between clients loaded at boot time and clients loaded dynamically, other than a few entries in the "client" data structure.
Hmm... though because we see such large startup times when loading in clients from SQL, it'd be nice to be able to turn that DoS protection off, and just run the whole setup using dynamic clients, I dare say it'd save quite a bit of memory too (currently loading 600+ NAS).
The main problem right now is that the SQL lookups (or whatever) are done in the main server thread. i.e. until the lookups finish, ALL new requests are ignored. This is bad, but not catastrophic if your SQL servers are up. If the SQL servers are down, bad things can happen, like large timeouts, and maybe lost packets. Once I get the dynamic client lookups pushed to a child thread, the main worker thread can go back to processing other packets. I can then relax some of the DoS provisions.
Did you include client assignment to virtual-servers, I don't see an attribute listed in the example...?
Yes. It's in the "update" section that isn't doing SQL lookups. Alan DeKok.
Nice work! -Peter On Sat 14 Jun 2008, Alan DeKok wrote:
Arran Cudbard-Bell wrote:
Wow this is such a neat way of doing it. Don't reload the entire client table every time there's an update, just provide provision for bringing new clients into the list dynamically
Yup.
until we get a chance to reload the client list properly.
Nope. If they client is loaded dynamically, it's in the list "properly". There is no difference between clients loaded at boot time and clients loaded dynamically, other than a few entries in the "client" data structure.
Hmm... though because we see such large startup times when loading in clients from SQL, it'd be nice to be able to turn that DoS protection off, and just run the whole setup using dynamic clients, I dare say it'd save quite a bit of memory too (currently loading 600+ NAS).
The main problem right now is that the SQL lookups (or whatever) are done in the main server thread. i.e. until the lookups finish, ALL new requests are ignored. This is bad, but not catastrophic if your SQL servers are up.
If the SQL servers are down, bad things can happen, like large timeouts, and maybe lost packets.
Once I get the dynamic client lookups pushed to a child thread, the main worker thread can go back to processing other packets. I can then relax some of the DoS provisions.
Did you include client assignment to virtual-servers, I don't see an attribute listed in the example...?
Yes. It's in the "update" section that isn't doing SQL lookups.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- Peter Nixon http://peternixon.net/
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Automatic cvs log generator -
Peter Nixon