Hi,
The ipvs 0.9.8 is now available at:
http://www.LinuxVirtualServer.org/software/ipvs-0.9.8-2.2.14.tar.gz
Changes:
* Added random drop of syn entries before running out of memory
When available memory is less than 1024 pages, randomly scan
1/16 of table to drop entries that are in SYN_RECV state. To
activate this random drop functionality,
echo 1 > /proc/sys/net/ipv4/ip_vs_randomdrop
it will be hard for distributed syn flooding attack tools to
make the LVS box run out of memory.
* Fixed a negative counter bug because of wrong invalid template
The invalid template like <cip, 65535, vip, 65535, rip, 65535>
is changed to <cip, 0, vip, 65535, rip, 65535>.
The changes of ipvsadm:
* added the option to read commands from stdio, and it can be
compiled with libpopt. Thank Horms!
* added the option to save rules to stdout.
Thanks,
Wensong
|