Permalink
Browse files

- Disable explicit loading of Linux kernel modules via yvipagent

  (iptables will load the appropriate modules on start).
- Minor documentation updates
  • Loading branch information...
1 parent 7bc90af commit 6fd12e64a9e121d7c8c6eafa86506557c90a0861 Ben Haga committed Nov 5, 2012
Showing with 33 additions and 9 deletions.
  1. +4 −0 yvipagent/CHANGES
  2. +1 −1 yvipagent/LICENSE
  3. +14 −1 yvipagent/doc/yvip.conf.5
  4. +11 −4 yvipagent/doc/yvipagent.8
  5. +1 −1 yvipagent/src/yvip.sh
  6. +2 −2 yvipagent/src/yvipagent.pl
View
4 yvipagent/CHANGES
@@ -1,3 +1,7 @@
+Version 1.3 (2012-11-05)
+ * Linux: Disable explicit loading of kernel modules via yvipagent. iptables
+ will load the appropriate modules as required.
+ * Minor documentation updates
Version 1.2 (2010-11-08)
* on FreeBSD, also explicitly set the dscp_rewrite.enabled
View
2 yvipagent/LICENSE
@@ -1,4 +1,4 @@
-Copyright (c) 2009,2010,2011 Yahoo! Inc. All rights reserved.
+Copyright (c) 2009,2010,2011,2012 Yahoo! Inc. All rights reserved.
Redistribution and use of this software in source and binary forms, with
or without modification, are permitted provided that the following
View
15 yvipagent/doc/yvip.conf.5
@@ -1,6 +1,6 @@
.\" This manual page was originally written by Jan Schaumann
.\" <jschauma@yahoo-inc.com> in September 2009.
-.Dd January 20, 2011
+.Dd November 5, 2012
.Dt YVIP 5
.Os
.Sh NAME
@@ -59,3 +59,16 @@ dscp=41
Note that the
.Ar key=value
pairs are unquoted.
+.Sh HISTORY
+The
+.Nm
+maintainer is
+.An Ben Haga
+.Aq bhaga@yahoo-inc.com .
+.Pp
+The
+.Nm
+utility was originally written by
+.An Jan Schaumann
+.Aq jschauma@yahoo-inc.com
+in September 2009.
View
15 yvipagent/doc/yvipagent.8
@@ -1,6 +1,6 @@
.\" This manual page was originally written by Jan Schaumann
.\" <jschauma@yahoo-inc.com> in September 2009.
-.Dd January 21, 2011
+.Dd November 5, 2012
.Dt YVIPAGENT 8
.Os
.Sh NAME
@@ -20,7 +20,8 @@ It does this by parsing the VIP configuration files found in the directory
specified via the
.Fl d
flag and installing the necessary firewall rules, loopback aliases, kernel
-modules etc.
+modules (FreeBSD-only), et cetera. Linux kernel module loading is handled
+by iptables.
.Pp
.Nm
is normally run at system startup time (or manually) from
@@ -81,8 +82,8 @@ If invoked with the argument being
it will perform the following actions for each of the VIPs:
.Bl -bullet -compact -offset indent
.It
-ensure VIP-related kernel modules are loaded (ie load if not already
-loaded)
+ensure VIP-related kernel modules are loaded (FreeBSD-only, ie load if not
+already loaded)
.It
ensure needed firewall rules are installed (ie add if not present)
.It
@@ -108,6 +109,12 @@ besides syntax checking.
.Sh HISTORY
The
.Nm
+maintainer is
+.An Ben Haga
+.Aq bhaga@yahoo-inc.com .
+.Pp
+The
+.Nm
utility was originally written by
.An Jan Schaumann
.Aq jschauma@yahoo-inc.com
View
2 yvipagent/src/yvip.sh
@@ -1,6 +1,6 @@
#! /bin/sh
#
-# Copyright (c) 2009,2010,2011 Yahoo! Inc.
+# Copyright (c) 2009,2010,2011,2012 Yahoo! Inc.
#
# Originally written by Jan Schaumann <jschauma@yahoo-inc.com> in September
# 2009.
View
4 yvipagent/src/yvipagent.pl
@@ -1,6 +1,6 @@
#! /usr/local/bin/perl -Tw
#
-# Copyright (c) 2009,2010,2011 Yahoo! Inc.
+# Copyright (c) 2009,2010,2011,2012 Yahoo! Inc.
#
# Originally written by Jan Schaumann <jschauma@yahoo-inc.com> in September
# 2009.
@@ -91,7 +91,7 @@
"firewall_config_stop" => "/sbin/sysctl <rule>",
},
"linux" => {
- "kernel_modules" => "ipt_dscp ipt_DADDR ",
+ "kernel_modules" => "",
"kernel_module_test" => "/bin/grep -q ^<mod> /proc/modules",
"kernel_module_load" => "/sbin/modprobe <mod>",
"loopback_start" => "/sbin/ifconfig lo",

0 comments on commit 6fd12e6

Please sign in to comment.