<feed xmlns='http://www.w3.org/2005/Atom'>
<title>radsecproxy.git, branch mauchle-radsecproxy-60</title>
<subtitle>RADIUS proxy with support for TLS RadSec</subtitle>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/'/>
<entry>
<title>add msg-id to debug log output</title>
<updated>2017-08-01T15:48:05+00:00</updated>
<author>
<name>Fabian Mauchle</name>
<email>fabian.mauchle@switch.ch</email>
</author>
<published>2017-03-24T15:40:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=3e7aa7fb7fc9dba03111da034292d124efaf8759'/>
<id>3e7aa7fb7fc9dba03111da034292d124efaf8759</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>make sure rq-&gt;to is set to NULL when cleaning up server output queue</title>
<updated>2017-03-10T13:27:49+00:00</updated>
<author>
<name>Fabian Mauchle</name>
<email>fabian.mauchle@switch.ch</email>
</author>
<published>2017-02-27T16:40:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=3d9be8431e7644e440c58b7132563db0ace0267b'/>
<id>3d9be8431e7644e440c58b7132563db0ace0267b</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Use a listen(2) backlog of 128.</title>
<updated>2017-01-18T13:25:26+00:00</updated>
<author>
<name>Linus Nordberg</name>
<email>linus@nordu.net</email>
</author>
<published>2017-01-18T13:25:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=f3619bf65967255e1009fec42b28007b49e0f4e4'/>
<id>f3619bf65967255e1009fec42b28007b49e0f4e4</id>
<content type='text'>
There's a chance that incoming (legitimate) connections arrive faster
than what it takes to spawn a new thread and get back to
listen(). Therefore we should ask the stack to queue at least one
entry, i.e. use a backlog value of at least 1. There's arguable also a
chance of more than two concurrent incoming connections, which would
make a case for a backlog value greater than one.

A reasonable high value seems to be 128, which also is what SOMAXCONN
is on many unix systems. In the choice between 1 and 128, an argument
against the higher value is that it may mask the potential problem of
spending a long time serving incoming connections.

Being reasonably confident that radsecproxy is efficient when it comes
to serving incoming connections, by handing them off to a newly
spawned thread, I think that 128 is a fine choice.

Closes RADSECPROXY-72.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
There's a chance that incoming (legitimate) connections arrive faster
than what it takes to spawn a new thread and get back to
listen(). Therefore we should ask the stack to queue at least one
entry, i.e. use a backlog value of at least 1. There's arguable also a
chance of more than two concurrent incoming connections, which would
make a case for a backlog value greater than one.

A reasonable high value seems to be 128, which also is what SOMAXCONN
is on many unix systems. In the choice between 1 and 128, an argument
against the higher value is that it may mask the potential problem of
spending a long time serving incoming connections.

Being reasonably confident that radsecproxy is efficient when it comes
to serving incoming connections, by handing them off to a newly
spawned thread, I think that 128 is a fine choice.

Closes RADSECPROXY-72.
</pre>
</div>
</content>
</entry>
<entry>
<title>Revert partial fix for RADSECPROXY-69 (98d7bbe).</title>
<updated>2016-11-01T14:09:41+00:00</updated>
<author>
<name>Linus Nordberg</name>
<email>linus@nordu.net</email>
</author>
<published>2016-11-01T14:09:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=829c65af8e4eee61168f3499c8fb23d458dbf0d3'/>
<id>829c65af8e4eee61168f3499c8fb23d458dbf0d3</id>
<content type='text'>
This was potentially making things worse.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This was potentially making things worse.
</pre>
</div>
</content>
</entry>
<entry>
<title>Look at servers-&gt;dynamiclookuparg for deciding if a server is dynamic.</title>
<updated>2016-11-01T09:36:48+00:00</updated>
<author>
<name>Linus Nordberg</name>
<email>linus@nordu.net</email>
</author>
<published>2016-10-31T17:21:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=98d7bbe9214488d595031257b35bc5abb5a24f43'/>
<id>98d7bbe9214488d595031257b35bc5abb5a24f43</id>
<content type='text'>
The dynamiclookupcommand member of the _config_ of the server is being
set to NULL when it's copied in confserver_cb(), resulting in dynamic
discovery being done for realms that already have a server.

Patch from Fabian Mauchle.

Addresses RADSECPROXY-69.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The dynamiclookupcommand member of the _config_ of the server is being
set to NULL when it's copied in confserver_cb(), resulting in dynamic
discovery being done for realms that already have a server.

Patch from Fabian Mauchle.

Addresses RADSECPROXY-69.
</pre>
</div>
</content>
</entry>
<entry>
<title>Copyright year fixes.</title>
<updated>2016-11-01T09:36:48+00:00</updated>
<author>
<name>Linus Nordberg</name>
<email>linus@nordu.net</email>
</author>
<published>2016-10-20T10:41:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=5ccca99b571f8bd948d87eab006612cbc02689dd'/>
<id>5ccca99b571f8bd948d87eab006612cbc02689dd</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Add PGP key info.</title>
<updated>2016-11-01T09:36:48+00:00</updated>
<author>
<name>Linus Nordberg</name>
<email>linus@nordu.net</email>
</author>
<published>2016-10-20T10:41:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=1f25de3f4619fcb112ee0a36ec1c2965ac6e64c4'/>
<id>1f25de3f4619fcb112ee0a36ec1c2965ac6e64c4</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Update README with version, new web site and minor wording.</title>
<updated>2016-11-01T09:36:48+00:00</updated>
<author>
<name>Linus Nordberg</name>
<email>linus@nordu.net</email>
</author>
<published>2016-10-20T09:59:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=3ab52ddfd2f2b9eb36d6f248ff331e39a9e13b31'/>
<id>3ab52ddfd2f2b9eb36d6f248ff331e39a9e13b31</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Remove --enable-experimental-dyndisc build config knob.</title>
<updated>2016-11-01T09:36:48+00:00</updated>
<author>
<name>Linus Nordberg</name>
<email>linus@nordu.net</email>
</author>
<published>2016-10-20T09:50:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=3b3742a9f5fb087674bd448636c06f011f81e8d7'/>
<id>3b3742a9f5fb087674bd448636c06f011f81e8d7</id>
<content type='text'>
Be aware that use of the DynamicLookupCommand configuration option
still enables code known to be buggy.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Be aware that use of the DynamicLookupCommand configuration option
still enables code known to be buggy.
</pre>
</div>
</content>
</entry>
<entry>
<title>Bump version to 1.7.1-alpha-dev.</title>
<updated>2016-11-01T09:36:26+00:00</updated>
<author>
<name>Linus Nordberg</name>
<email>linus@nordu.net</email>
</author>
<published>2016-10-20T09:47:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/radsecproxy.git/commit/?id=a44e795d6cb39edb422afb99841dfe7e242f6bb7'/>
<id>a44e795d6cb39edb422afb99841dfe7e242f6bb7</id>
<content type='text'>
Next release will be 1.7.1-alpha.
When the 1.7 series becomes stable, the `-alpha' prefix is dropped.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Next release will be 1.7.1-alpha.
When the 1.7 series becomes stable, the `-alpha' prefix is dropped.
</pre>
</div>
</content>
</entry>
</feed>
