)]}'
{
  "commit": "f4bc17cdd205ebaa3807c2aa973719bb5ce6a5b2",
  "tree": "c2bbaf2251ba91f4951f6614a9475e04fdec790e",
  "parents": [
    "3575792e005dc9994f15ae72c1c6f401d134177d"
  ],
  "author": {
    "name": "Julian Anastasov",
    "email": "ja@ssi.bg",
    "time": "Tue Sep 21 17:35:41 2010 +0200"
  },
  "committer": {
    "name": "Patrick McHardy",
    "email": "kaber@trash.net",
    "time": "Tue Sep 21 17:35:41 2010 +0200"
  },
  "message": "ipvs: netfilter connection tracking changes\n\n\tAdd more code to IPVS to work with Netfilter connection\ntracking and fix some problems.\n\n- Allow IPVS to be compiled without connection tracking as in\n2.6.35 and before. This can avoid keeping conntracks for all\nIPVS connections because this costs memory. ip_vs_ftp still\ndepends on connection tracking and NAT as implemented for 2.6.36.\n\n- Add sysctl var \"conntrack\" to enable connection tracking for\nall IPVS connections. For loaded IPVS directors it needs\ntuning of nf_conntrack_max limit.\n\n- Add IP_VS_CONN_F_NFCT connection flag to request the connection\nto use connection tracking. This allows user space to provide this\nflag, for example, in dest-\u003econn_flags. This can be useful to\nrequest connection tracking per real server instead of forcing it\nfor all connections with the \"conntrack\" sysctl. This flag is\nset currently only by ip_vs_ftp and of course by \"conntrack\" sysctl.\n\n- Add ip_vs_nfct.c file to hold all connection tracking code,\nby this way main code should not depend of netfilter conntrack\nsupport.\n\n- Return back the ip_vs_post_routing handler as in 2.6.35 and use\nskb-\u003eipvs_property\u003d1 to allow IPVS to work without connection\ntracking\n\nConnection tracking:\n\n- most of the code is already in 2.6.36-rc\n\n- alter conntrack reply tuple for LVS-NAT connections when first packet\nfrom client is forwarded and conntrack state is NEW or RELATED.\nAdditionally, alter reply for RELATED connections from real server,\nagain for packet in original direction.\n\n- add IP_VS_XMIT_TUNNEL to confirm conntrack (without altering\nreply) for LVS-TUN early because we want to call nf_reset. It is\nneeded because we add IPIP header and the original conntrack\nshould be preserved, not destroyed. The transmitted IPIP packets\ncan reuse same conntrack, so we do not set skb-\u003eipvs_property.\n\n- try to destroy conntrack when the IPVS connection is destroyed.\nIt is not fatal if conntrack disappears before that, it depends\non the used timers.\n\nFix problems from long time:\n\n- add skb-\u003eip_summed \u003d CHECKSUM_NONE for the LVS-TUN transmitters\n\nSigned-off-by: Julian Anastasov \u003cja@ssi.bg\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "003d75f6ffe149063121b444239a55feebfd135b",
      "old_mode": 33188,
      "old_path": "include/linux/ip_vs.h",
      "new_id": "df7728613720a1687d24ae022ecdb97c368b77f5",
      "new_mode": 33188,
      "new_path": "include/linux/ip_vs.h"
    },
    {
      "type": "modify",
      "old_id": "62698a9c163192d89a816dbbb5f0a4fc9dfd7d66",
      "old_mode": 33188,
      "old_path": "include/net/ip_vs.h",
      "new_id": "e8ec5231eae9914fdcc5728c262a9fa0fcc20c92",
      "new_mode": 33188,
      "new_path": "include/net/ip_vs.h"
    },
    {
      "type": "modify",
      "old_id": "46a77d5c3887dc7c874b327a77afb539c8d92777",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipvs/Kconfig",
      "new_id": "af3c9f48f2d79a38ebdde88d5cb2a39429e88ff2",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/Kconfig"
    },
    {
      "type": "modify",
      "old_id": "e3baefd7066e56d9ceaad6025c6de3e710a2e870",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipvs/Makefile",
      "new_id": "349fe8819b89f576275bd54fd4aa626210f2f66a",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/Makefile"
    },
    {
      "type": "modify",
      "old_id": "9fe1da7bcf16a9d9a05579b175f632a35aefd1d0",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipvs/ip_vs_conn.c",
      "new_id": "a970d9691496dfb488ce93887e0591e0b6effa60",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/ip_vs_conn.c"
    },
    {
      "type": "modify",
      "old_id": "319991d4d25165bebbe5d85219c37ea69b852adb",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipvs/ip_vs_core.c",
      "new_id": "7fbc80d81fe87994cbe55fc7883a8c8a11e95038",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/ip_vs_core.c"
    },
    {
      "type": "modify",
      "old_id": "7bd41d28080c4d4e20a2824289d91a7e8b90ad2f",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipvs/ip_vs_ctl.c",
      "new_id": "d2d842f292c6c640af36aee18a0063bbda680922",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/ip_vs_ctl.c"
    },
    {
      "type": "modify",
      "old_id": "7e9af5b76d9eb280cc7d197538e5ce6161c42e66",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipvs/ip_vs_ftp.c",
      "new_id": "9cd375f94d61f4efa12d48dc3beee54428a40eb8",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/ip_vs_ftp.c"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "c038458d0290696597f0a054839bcc18c06a98e0",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/ip_vs_nfct.c"
    },
    {
      "type": "modify",
      "old_id": "49df6bea6a2ddaec391ce077cf9f72a72efc4a7f",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipvs/ip_vs_xmit.c",
      "new_id": "8817afa34e6af0e73a5057a585212cf494bf6fad",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/ip_vs_xmit.c"
    }
  ]
}