{"push_id":2519063335,"size":12,"distinct_size":12,"ref":"refs/heads/issue_2018","head":"ad4c313d93350509ccb5f3ba391a1ab14ff963ef","before":"c5d7017a33bb5b567e85054cc115bd6824d9d269","commits":[{"sha":"bad940f6d97d9840161f7fcef509d551e3096c29","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: rework pbr ipset entry\n\nAdd ns_id into zebra_pbr ipset\nThis is important so that each ipset entry knows on which NETNS the\nipset entry must be inkected\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/bad940f6d97d9840161f7fcef509d551e3096c29"},{"sha":"8105cfc564fba8fb1c0194461e50f8bea6845133","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: ipset and ipset entry deletion remove entry from hash list too\n\nThis commit is a fix that removes the structure from the hash list,\ninstead of just removing that structure.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/8105cfc564fba8fb1c0194461e50f8bea6845133"},{"sha":"90e59baf4cfd55305ffc903c7383a11ae2c8ff39","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: cleanup zebra policy context\n\nUpon the remote daemon leaving, some contexts may have to be flushed.\nThis commit does the change. IPset and IPSet Entries and iptables are\nflushed.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/90e59baf4cfd55305ffc903c7383a11ae2c8ff39"},{"sha":"251c6228bb56e88ad02bea720952d7d84fcc4594","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: handle notification in case pbr ipset, or iptables is removed\n\nIn cast the removal of an iptable or an ipset pbr context is done,\nthen a notification is sent back to the relevant daemon that sent the\nmessage.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/251c6228bb56e88ad02bea720952d7d84fcc4594"},{"sha":"c4689e67a7a3fd4a15de0b03e1040c0670c2c778","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: add script wrapper framework to interact with script\n\nThis framework has 2 APIs,\n- able to execute script show command, and return the output in\na json structure. Those script show command are tighted with iptables\nand ipset output.\n- able to analyse json tree, and extract pkts and bytes values.\n\nThis framework permits gaining time, since it allows frr to call some\nexternal programs and rely on externals like the output.\nThis framework relies on plugin module. This module is called\nzebra_wrap_script.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/c4689e67a7a3fd4a15de0b03e1040c0670c2c778"},{"sha":"aa6084bc1dc90721f1d8e3dec43a6659d0b4c8ec","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"doc: add wrap_script module in documentation\n\nupdate documentation with zebra module script.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/aa6084bc1dc90721f1d8e3dec43a6659d0b4c8ec"},{"sha":"07b0d21473db947c78df24824e9caf490b8d8069","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: add wrap script handlers for iptable/ipset/iprule config\n\nIn order to configure iptables, ipset entries and ipset contexts, 3\nscript handlers apis are available to pass scripts commands.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/07b0d21473db947c78df24824e9caf490b8d8069"},{"sha":"4bb6e94fa1d9163bfaa964e83544902326aabde5","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: add wrap_script_node to handle vty commands for wrap_script\n\nThis preparatory work introduces a new node that will be used to add vty\nconfiguration commands, and the associated show running.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/4bb6e94fa1d9163bfaa964e83544902326aabde5"},{"sha":"f9dfe9b83557b1bf593599907b65f6f6e025a83a","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: add vty command to configure target ip script\n\n3 new vty commands permit to configure zebra wrap ip scripts:\n- [no] wrap script ipset <>\n- [no] wrap script iptable <>\n- [no] wrap script iprule <>\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/f9dfe9b83557b1bf593599907b65f6f6e025a83a"},{"sha":"213b33aa2f17870504f46704718f0b502383ad42","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: PBR configuration handlers may call wrap script handlers\n\nThe following PBR handlers: ip rule, ipset, and iptables will prioritary\ncall the wrap script handlers. If the script handler is not present ( or\nreturns 0 - that is why the script handlers may not return 0), then if\navailable an other configuration call may be called. This is the case\nwith ip rule PBR handler that also has a netlink API. This mechanism\nguarantees that if wrap script can configure it, then no need to use\nnetlink.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/213b33aa2f17870504f46704718f0b502383ad42"},{"sha":"aff23d2ba0948d99eecfac33217dc32afffbec7d","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: pbr vty show command for ipset and iptables\n\nTwo new vty show functions available:\nshow pbr ipset <NAME>\nshow pbr iptables <NAME>\n\nThose function dump the underlying \"kernel\" contexts. It relies on the\nzebra pbr contexts first. This helps then to know which zebra pbr\ncontext has been configured since those contexts are mainly configured\nby BGP Flowspec.\nAlso, it relies on zebra wrap context API. From this wrap API, it gets\nsome statistics information to know which context has been matching how\nmany packets and bytes.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/aff23d2ba0948d99eecfac33217dc32afffbec7d"},{"sha":"ad4c313d93350509ccb5f3ba391a1ab14ff963ef","author":{"name":"Philippe Guibert","email":"064852870c4ba6ab4a0bbd18f0ef92683e6eaaf8@6wind.com"},"message":"zebra: iptable redirect marked traffic to a custom iptable\n\nThere are cases where 2 flowspec entries may overlap, despite the\ncorrect sequencing of configuration is given. The reason is due to the\nfact that we rely on iptables marker to redirect traffic to a new\nrouting table. And iptable marker is not a termination target.\nSo the solution consists in using a custom user chain where marked\ntraffic will be redirected to. Then the redirect and the accept target\nwill be set, thus avoiding reentering in the list of other rules from\nthe standard chain from iptables.\n\nSigned-off-by: Philippe Guibert <philippe.guibert@6wind.com>","distinct":true,"url":"https://api.github.com/repos/pguibert6WIND/frr/commits/ad4c313d93350509ccb5f3ba391a1ab14ff963ef"}]}
{"actor":{"display_login":"pguibert6WIND"}}