Whatever you want !

Real servers

Add quorum_weight, defaults to weight. May want to set different between quorum and IPVS weight

Rationalise use of timer_now()/gettimeofday()/set_time_now()

virtual route:

1. How do we handle

     virtual_routes {

            192.168.210.0/24 via 10.1.0.1

     }

     if there is no route to 10.1.0.1? If we go to fault state if it cannot

     be installed when attempt to transition to master, how do we know to transiton

     out of fault state.

IPVS

1. Can we have an IPv4 fwmark and specify tunnel to IPv6, and vice versa etc.

   What does ipvsadm do?

2. Sort out IP_VS_SO vs LVS_CMD...

3. Make sure log/email messages contain relevant info re VS -> RS. See FMT_CHK

The following are still outstanding from the ideas for what became v2.0.0:

	* Sort out termination in vrrp and checker - stop_vrrp/check, and phase2

	    are inconsistent between vrrp and checker. What about bfd?

	* A route with multiple nexthops will only be deleted if all interfaces

	    are down. Each nexthop needs to record the interface, and only remove

	    once all down

	* Don't add RTNMGRP_IPV4_ADDR/IPV6_ADDR if not monitoring one of those

	    families

	* May want to stop VS down at start for alpha mode RSs (except SNMP)

	* Rate limit respawning if a child process dies

	* Have a socket to connect to for receiving notifications. A process

	    can register for what notifications it wants to receive.

	* Allow variable parameters to be passed to scripts - see issue #837

	* Make tarball include git version if not a tag

	* If an address owner recovers from fault, transition directly to

	  master

	* If configuration_state=MASTER && !OWNER, transition to master after

	  1 * advert_int + skew. Sort out all initialisation around states

	* Split vrrp_snmp.c into vrrp_snmp_keepalived.c vrrp_snmp_rfcv2.c and

	  vrrp_snmp_rfcv3.c

	* Only send correct type of trap, and respond to correct SNMP version,

	  controlled by config, defaults to type of instance. Flags snmp_v2 and

	  snmp_v3 to force other, or both.

	* Ensure unicast peers groups check source address of received advert

	  so that the same VRID can be used between different peer groups on the

	  same interface.

	* Add process checking:

	    Add track_process for vrrp instances

	    Add PROCESS_CHECK for checkers

	    - Find PID and remember it. If PID has gone, try and find new pid

	    Look at how pidof/killall find processes

	* Allow dynamic definitions, e.g. $_VI_NAME

	    Also $*_INSTANCE net_namspace $_INSTANCE

	    so $* means only do if $_INSTANCE not blank. */

	* ng-scheduler

Other issues awaiting resolution:

ipvs_group_range_cmd() appears nonsense, and inet_stor returning a uint8_t

doesn't work for IPv6. The virtual_service_entry_t thing needs range to be

uint32_t. Why would mask be 0xffffffff for IPv6?

ip_vs_daemon_kern vs /usr/include/linux/ip_vs.h ip_vs_daemon_user

vrrp_timer_fd should return 0 if an fd's timer is in the past?

Make vrrp->send_buffer a single buffer for all

Check timers passto to thread_... functions are reasonable, and stacktrace if not.

In function socket_state, should thread_add_write use timer_long() or -timer_long()

vrrp_timer_fd() - see comment

In thread functions with a timer, ensure not > LONG_MAX (or even some lower value);

Change tcp_socket_state etc to socket_state etc

Add noreturn function attribute on stop_vrrp/check

bin/genhash -s 2001:470:69dd:35::188 --port 80 -u /Harriet/     # works, but

bin/genhash -s 2001:470:69dd:35::188 --port 80 -u /Harriet/     # -S doesn't

								# but -S is OK with IPv4 address

in ipvswrapper.c, get rid of static srule etc and make them procedure local and pass as parameters

Stop passing base_ifp to netlink3_set_interface_parameters() etc

ipsecah issues

==============

1. sync and vmac ignore counter

2. Start up just after master dies, but have lowest priority so become master with counter == 1

3. cycle won't happen

4. In vrrp_backup, don't check auth type matches

5. ? if cycle becomes set, we must become backup. How do we get out of state?

epoll

=====

Use timerfd (see timerfd_create(2)) for microsecond timing with epoll, and do not bother with its timeout.

If not available, then simply use the epoll timer.

Optimise calls to timer_now() and see set_time_now()

====================================================

After select completes, get time. Before calculating next

select expire time, get time again.

To test time processing, save time after select and log time taken

before next select. Also initialise timer at startup.

Add api

=======

Add pipe for updates

====================

track_script like for absolute or relative priority

Upstream issues

===============

1. Kernel. Socket receive buffers growing to fill memory

   See issue #839. If the following setting are in place:

net.core.rmem_default = 37748736

net.core.rmem_max = 37748736

   and vrrp_tx_bufs_policy NO_SEND_RX is configured, then

   all system memory can be consumed. Why is it not limited

   to 37748736 bytes?

2. Kernel. Corruption when netlink sends status of large number

   of links - see issues #392/#803.

   When using default socket receive buffer size, and have 500

   vmac interfaces configured on a physical interface and the

   physical interface is downed, lots of netlink messages are

   received, and we get an ENOBUFS. However, after that we then

   see a repeat of some of the earlier messages, so it looks like

   a circular buffer corruption. Running ip -ts monitor link addr route

   we see precisely the same problem at exactly the same message,

   although which message it is varies each time.

3. net-snmp. Display-hint only works on indices.

   See issue #866.

   # snmpwalk -v2c -c public localhost KEEPALIVED-MIB::virtualServerAddress

   KEEPALIVED-MIB::virtualServerAddress.1 = STRING: "

0,"

   The address is attempted to be output as text, rather than using

   the display hint