History of this web page: 13-MAR-2024 - iproute2-6.8-1-iparp-1.diff: Linux 6.8 support - Sync with Linux 6.8: arprules-6.8-3.diff patch-6.8-ja1.diff 28-JAN-2024 - iproute2-6.7-1-iparp-1.diff: Linux 6.7 support - Sync with Linux 6.7: no changes 05-NOV-2023 - iproute2-6.6-1-iparp-1.diff: Linux 6.6 support - Sync with Linux 6.6: no changes 06-SEP-2023 - iproute2-6.5-1-iparp-1.diff: Linux 6.5 support 28-AUG-2023 - Sync with Linux 6.5: no changes 08-AUG-2023 - update LVS.txt: -j CT --helper ftp 06-JUL-2023 - iproute2-6.4-1-iparp-1.diff: Linux 6.4 support 26-JUN-2023 - Sync with Linux 6.4 16-JUN-2023 - iproute2-6.3-1-iparp-1.diff: - one binary for Linux 2.6 - 6.3 patched with arprules-*.diff - json/color support 15-JUN-2023 - Sync with Linux 6.3: no changes 27-MAR-2023 - Sync with Linux 6.2: no changes 11-FEB-2023 - Upload neigh.pu and neigh.png - Neighbor state diagram 14-JAN-2023 - Sync with Linux 6.1 14-JAN-2023 - Sync with Linux 6.0 30-AUG-2022 - Sync with Linux 5.19 12-JUN-2022 - Sync with Linux 5.18 03-APR-2022 - Sync with Linux 5.17 29-JAN-2022 - Sync with Linux 5.16 06-NOV-2021 - Sync with Linux 5.15 12-SEP-2021 - Sync with Linux 5.14 (no changes after 5.13) 19-JUL-2021 - Sync with Linux 5.13 03-MAY-2021 - Sync with Linux 5.12 28-FEB-2021 - Sync with Linux 5.11 03-JAN-2021 - Sync with Linux 5.10: no changes 17-OCT-2020 - Sync with Linux 5.9: - clear fl4_gw in bpf_ipv4_fib_lookup(): 05_nf_reroute-5.9-17.diff routes-5.9-17.diff patch-5.9-ja1.diff 10-AUG-2020 - Sync with Linux 5.8 06-JUN-2020 - Sync with Linux 5.7 05-APR-2020 - Sync with Linux 5.6 02-APR-2020 - Update TUN-HOWTO.txt 02-FEB-2020 - Sync with Linux 5.5 30-NOV-2019 - Sync with Linux 5.4 - Sync with Linux 5.3 15-SEP-2019 - Sync with Linux 5.2 06-MAY-2019 - Sync with Linux 5.1 06-MAY-2019 - Sync with Linux 5.0 (no changes after 4.20) 20-JAN-2019 - Sync with Linux 4.20 28-OCT-2018 - Sync with Linux 4.19 31-AUG-2018 - Sync with Linux 4.18 17-JUN-2018 - Sync with Linux 4.17 06-APR-2018 - Sync with Linux 4.16 03-FEB-2018 - Sync with Linux 4.15 26-NOV-2017 - Sync with Linux 4.14 16-SEP-2017 - Sync with Linux 4.13 09-JUL-2017 - Sync with Linux 4.12 08-MAY-2017 - Sync with Linux 4.11 26-FEB-2017 - Sync with Linux 4.10 31-DEC-2016 - Sync with Linux 4.9 09-OCT-2016 - Sync with Linux 4.8 31-JUL-2016 - Sync with Linux 4.7 21-MAY-2016 - Sync with Linux 4.6 20-MAR-2016 - Sync with Linux 4.5: all latest patches work also on 4.5 12-JAN-2016 - Sync with Linux 4.4 07-NOV-2015 - Sync with Linux 4.3 09-SEP-2015 - Sync with Linux 4.2 17-AUG-2015 - New version arprules-4.1-3.diff to incorporate fix from Luigi Iotti . Linux 4.1+ has build check for the max RTM message in SELinux. 27-JUN-2015 - Sync with Linux 4.1 19-APR-2015 - Sync with Linux 4.0 - Fix long-standing bug in arprules-* (included also in patch-*) where at_refcnt is not increased by arpf_lookup leading to the "Destroying alive arp table node %p from %08lx" message 04-MAR-2015 - send-to-self-3.4-1.diff was not properly shown as 3.4-3.5 version 14-FEB-2015 - Sync with Linux 3.19 13-DEC-2014 - Sync with Linux 3.18 07-OCT-2014 - Sync with Linux 3.17 05-AUG-2014 - Sync with Linux 3.16 10-JUN-2014 - Sync with Linux 3.15 02-APR-2014 - Sync with Linux 3.14 25-JAN-2014 - Sync with Linux 3.13 - update LVS.txt 08-NOV-2013 - Sync with Linux 3.12 04-SEP-2013 - Sync with Linux 3.11 02-JUL-2013 - Sync with Linux 3.10 01-MAY-2013 - Sync with Linux 3.9 21-FEB-2013 - arprules require new iparp tool for iproute2-3.8.0.tar.gz 19-FEB-2013 - Sync with Linux 3.8 13-DEC-2012 - Sync with Linux 3.7 08-OCT-2012 - Sync with Linux 3.6 22-JUL-2012 - Sync with Linux 3.5 21-MAY-2012 - Sync with Linux 3.4 20-MAR-2012 - Sync with Linux 3.3 07-JAN-2012 - Sync with Linux 3.2 26-OCT-2011 - Sync with Linux 3.1 24-SEP-2011 - For 3.0 05_nf_reroute-3.0-16.diff, routes-3.0-16.diff and patch-3.0-ja1.diff were missing the 'fl4.fl4_gw = 0;' line in flowi4_init_output, function added in 3.0. As result, output routes can randomly fail to match cached route or to properly create routes with fl4_gw = 0. Create new files to fix this problem: - 05_nf_reroute-3.0-17.diff - routes-3.0-17.diff - patch-3.0-ja2.diff Thanks to Bogdan Radulescu for reporting the problem and testing the fix. 23-JUL-2011 - Sync with Linux 3.0 - For 2.6.39 05_nf_reroute-2.6.39-16.diff and routes-2.6.39-16.diff were missing the 'fl4.fl4_gw = 0;' line in fib_validate_source which was present in patch-2.6.39-ja1.diff. As result, incoming traffic is not received properly. Create new files to fix this problem: - 05_nf_reroute-2.6.39-17.diff - routes-2.6.39-17.diff 20-MAY-2011 - Sync with Linux 2.6.39 20-MAR-2011 - Sync with Linux 2.6.38 08-JAN-2011 - Sync with Linux 2.6.37 23-OCT-2010 - Sync with Linux 2.6.36 - It seems hidden-forward_shared-2.6.36-2.diff is not needed, the separate patches can be applied together 03-AUG-2010 - Sync with Linux 2.6.35 13-JUL-2010 - Create bridge-utils-1.4-ipmode-1.diff 19-MAY-2010 - Sync with Linux 2.6.34 25-FEB-2010 - Sync with Linux 2.6.33 22-JAN-2010 - Try to show first and last patch date for better understanding. 05-DEC-2009 - Sync with Linux 2.6.32 18-SEP-2009 - Provide routes patch v16 for some kernels before 2.6.29 where the v2.6.28 fix (missing gw/lsrc match) is fully incorporated: New files: routes-2.6.24-16.diff routes-2.6.26-16.diff 11-SEP-2009 - Sync with Linux 2.6.31 13-JUN-2009 - Sync with Linux 2.6.30 29-MAR-2009 - arprules require new iparp tool (iproute2-2.6.29-1.tar.bz2) patched with iproute2-2.6.29-1-iparp-1.diff for Linux 2.6.29 26-MAR-2009 - Sync with Linux 2.6.29 06-FEB-2009 - Create version 16 of nf_reroute (fixed only in 2.6.28+) to fix missing 'lsrc' key check in route.c:compare_keys(). The bug appeared in 2.6.19 when compare_keys was changed and leads to excessive input route cache misses when NAT is used. Many Thanks to LeeGun for tracking the problem and providing the fix. Uploaded: routes-2.6.28-16.diff 05_nf_reroute-2.6.26-16.diff patch-2.6.28-ja2.diff 07-JAN-2009 - arprules require new iparp tool (iproute2-2.6.26.tar.bz2) patched with iproute2-2.6.26-iparp-1.diff for Linux 2.6.28 25-DEC-2008 - Sync with Linux 2.6.28 11-OCT-2008 - Sync with Linux 2.6.27 16-JUL-2008 - Sync with Linux 2.6.26 - alternative routes support for fib_trie.c: 01_alt_routes-2.6.26-12.diff| routes-2.6.26-15.diff patch-2.6.26-ja1.diff 19-APR-2008 - Sync with Linux 2.6.25 05-FEB-2007 - Michael Reske found problem with missing sysctl checks, so add the missing entries in kernel/sysctl_check.c, needed for 2.6.24+. 02-FEB-2008 - add fib.txt to #docs 27-JAN-2008 - Sync with Linux 2.6.24 - arprules require new iparp tool (iproute2) patched with iproute2-2.6.24-rc7-iparp-1.diff 15-JAN-2008 - Sync with Linux 2.4.36 14-OCT-2007 - Sync with Linux 2.6.23 12-JUL-2007 - Sync with Linux 2.6.22 28-APR-2007 - Sync with Linux 2.6.21 - Create version 15 of static routes (fixed only in 2.6.21+) to fix dead loop caused by missing clearing of DEAD flag in fib_sync_up() when compiled without CONFIG_IP_ROUTE_MULTIPATH. Thanks to Guan Xiaochun for spotting the bug. Uploaded: 00_static_routes-2.6.21-15.diff routes-2.6.21-15.diff 05_nf_reroute-2.6.21-15.diff patch-2.6.21-ja1.diff 24-MAR-2007 - Fixed problem in bridge-netfilter caused by "routes" patch calling ip_route_input() in PRE_ROUTING. It seems bridge-netfilter is the only place that assumes it is the first caller of ip_route_input for a packet. Fix it by releasing skb->dst if any is present at all. Uploaded: routes-2.6.20-14.diff 05_nf_reroute-2.6.20-14.diff patch-2.6.20-ja2.diff brnf_dst-2.6.20-1.diff - standalone patch 11-FEB-2007 - Sync with Linux 2.6.20 23-JAN-2007 - Fixed problem with the lsrc support causing reply packets for DNAT connections initiated in OUTPUT hook to be dropped before routing. Problem reported and fix tested by Bart Duchesne. Uploaded: routes-2.6.19-13.diff 05_nf_reroute-2.6.19-13.diff patch-2.6.19-ja2.diff 02-DEC-2006 - Sync with Linux 2.6.19 22-SEP-2006 - Sync with Linux 2.6.18 - Sync with Linux 2.4.33 24-JUN-2006 - LokiWall Project (http://lokiwall.sf.net) uses routes-2.6* for its Dual Routing feature 18-JUN-2006 - Sync with Linux 2.6.17 26-MAR-2006 - Sync with Linux 2.6.16 06-JAN-2006 - Sync with Linux 2.6.15 17-NOV-2005 - Sync with Linux 2.4.32 29-OCT-2005 - Sync with Linux 2.6.14 29-AUG-2005 - Sync with Linux 2.6.13 20-AUG-2005 - Willy Tarreau: Sync iparp and noarp user space patches to latest iproute2-050816: iproute2-050816-iparp-1.diff, iproute2-050816-noarp-1.diff 18-JUN-2005 - Sync with Linux 2.6.12 - Sync with Linux 2.4.31 09-APR-2005 - Sync with Linux 2.4.30 03-MAR-2005 - Sync with Linux 2.6.11 20-JAN-2005 - Sync with Linux 2.4.29 08-JAN-2005 - remove "__inline__" for fib_result_table from 01_alt_routes-*, routes-2.*, patch-2.* - arprules-2.6.10-2.diff, patch-2.6.10-ja2.diff: fix rtm_min and rta_max init 25-DEC-2004 - Sync with Linux 2.6.10 18-NOV-2004 - Sync with Linux 2.4.28 19-OCT-2004 - Sync with Linux 2.6.9 14-AUG-2004 - Sync with Linux 2.6.8 08-AUG-2004 - Sync with Linux 2.4.27 17-JUN-2004 - Sync with Linux 2.6.7 - Sync with bridge-utils-1.0.4 20-MAY-2004 - Created initial version 1.0 of the mpath management script in mpath/ 11-MAY-2004 - Sync with Linux 2.6.6 11-APR-2004 - Exported tmp/ops-2.4.26-1.diff to main page - Linked nfct/ to main page 04-APR-2004 - Sync with Linux 2.6.5 28-MAR-2004 - Sync with Linux 2.4.26-rc1 12-MAR-2004 - Sync with Linux 2.6.4 03-MAR-2004 - Added send-to-self-2.* to jumbo patch-2.*-ja*.diff 19-FEB-2004 - Sync with Linux 2.4.25 - Sync with Linux 2.6.3 08-FEB-2004 - arp_announce-2.6.2-1.diff 05-FEB-2004 - Sync with Linux 2.6.2 01-FEB-2004 - Change RTCF_NOARP -> RTM_F_NOARP in hidden-forward_shared-noarp-2.4.23-3.diff and noarp-2.4.23-1.diff as found by Johan Ekenberg 09-JAN-2004 - Sync with Linux 2.6.1 06-JAN-2004 - Sync with Linux 2.4.24 - Sync with Linux 2.6.0 20-DEC-2003 - Fix ipt_MASQUERADE.c in all 2.6 patches to correctly use the routing, this change was lost long time ago 06-DEC-2003 - Sync with Linux 2.6.0-test11 28-NOV-2003 - Sync with Linux 2.4.23 18-OCT-2003 - Sync with Linux 2.6.0-test8 25-AUG-2003 - Sync with Linux 2.4.22 27-JUL-2003 - Sync with Linux 2.6.0-test1 01-JUL-2003 - send-to-self-2.4.21-1.diff - send-to-self-2.5.73-1.diff 14-JUN-2003 - Sync with Linux 2.4.21 12-APR-2003 - Sync with Linux 2.5.67 09-APR-2003 - hidden-2.5.67-1.diff 23-MAR-2003 - Sync with Linux 2.2.25 06-MAR-2003 - Created rtmasq-2.4.20-routes9-2.diff: rtmasq against routes v9 01-DEC-2002 - Sync with Linux 2.5.50 30-NOV-2002 - Sync with Linux 2.2.23 29-NOV-2002 - Sync with Linux 2.4.20 25-NOV-2002 - Added patch-2.5.49-ja1.diff 24-OCT-2002 - Added HTB 3.7 port in ds9/ 12-OCT-2002 - Added hidden-2.4.20pre10-1.diff 29-SEP-2002 - Sync with Linux 2.5.39 16-SEP-2002 - Sync with Linux 2.2.22 15-SEP-2002 - Added hidden-2.5.34-1.diff, hidden ported to 2.5.34 10-AUG-2002 - Added QoS Backport from 2.4.19 to 2.2.21 into ds9/ 03-AUG-2002 - Sync with Linux 2.4.19 - Created jumbo patch patch-2.4.19-ja1.diff - bridge-ipmode-2.4.19-2.diff (rediff-ed to 2.4.19) 12-JUL-2002 - Added some stuff for the Linux 2.2 DiffServ 02-JUL-2002 - Added another toy: bridge-ipmode-2.4.19pre6-1.diff, bridge-utils-0.9.5-ipmode-1.diff, bridging.txt 15-JUN-2002 - Added rp_filter_mask-2.4.19pre6-1.diff - extend the rp_filter protection functionality by providing list of allowed mediums for each interface. 09-JUN-2002 - Sync with Linux 2.2.21 04-MAY-2002 - Early releases against 2.4.19 (pre8) 23-APR-2002 - Released Netparse 0.9 (wrong 2nd connect fails under 2.4+) 07-APR-2002 - Rediffed hidden device flag against 2.4.19pre5 06-APR-2002 - Ported 2nd version of iparp files to 2.2.20 03-APR-2002 - Uploaded 2nd version of iparp files, iparp.txt updated 31-MAR-2002 - Added first draft version of the iparp patches 05-MAR-2002 - Added 2nd version of the medium_id patches with changed semantic from Alexey Kuznetsov. medium_id now helps proxy_arp to reply correctly according to the defined topology: medium_id-2.4.18-2.diff medium_id-2.2.20-2.diff 26-FEB-2002 - Sync with Linux 2.4.18 17-FEB-2002 - Added development document about supporting IPSec in LVS: LVS_IPSEC.txt 04-FEB-2002 - Added 2nd version for rtlsrc: rtlsrc-2.4.17-2.diff 03-FEB-2002 Uploaded: routes-2.2.20-7.diff 01_alt_routes-2.2.20-7.diff 02_masq_csum_reroute-2.2.20-7.diff 05_key_gw-2.2.20-7.diff routes-2.2.20-IPVS-1.0.8-7.diff 02_masq_csum_reroute-2.2.20-IPVS-1.0.8-7.diff 27-JAN-2002 - Added rtlsrc-2.4.17-1.diff 25-JAN-2002 - Added LVS.txt: design notes 20-JAN-2002 - Added rtmasq support (ROUTE MASQuerading for Netfilter): rtmasq-2.4.16-1.diff 18-JAN-2002 - Roberto Nibali added patch against CIPE 1.5.2 to use it together with the routes-2.*.diff patches - Add info in dgd-usage.txt for the incremental checksum updates provided from the 02_masq_csum_reroute-2.2.* patches 03-JAN-2002 - Created TUN-HOWTO.txt 23-DEC-2001 - Sync with Linux 2.4.17 - Released Netparse 0.8 (regex_pos not reset on new state) - Slightly changed medium_id.txt 20-DEC-2001 - Whit Blauvelt tested patch against freeswan to use it together with the routes-2.*.diff patches 14-DEC-2001 - Uploaded: routes-2.4.16-6.diff routes-hidden-forward_shared-noarp-2.4.16-2.diff 00_static_routes-2.4.16-6.diff dgd-usage.txt dgd.txt routes-2.2.20-6.diff 00_static_routes-2.2.20-6.diff 11-DEC-2001 - Uploaded patch medium_id-2.2.20-1.diff 09-DEC-2001 - Created document medium_id.txt 08-DEC-2001 - Uploaded patch medium_id-2.4.16-1.diff 04-DEC-2001 - Uploaded jumbo patch hidden-forward_shared-noarp-2.4.16-1.diff - Uploaded jumbo patch routes-hidden-forward_shared-noarp-2.4.16-1.diff 02-DEC-2001 - Uploaded document from Christoph Simon about using Linux as router with many internet connections 26-NOV-2001 - Sync with Linux 2.4.16 - Created 06_hidden-routes-2.4.14-1.diff for the LVS users that use "hidden" with routes-2.4.* 24-NOV-2001 - Sync with Linux 2.4.15 - Released 05_nf_reroute-2.4.14-5pre2.diff and routes-2.4.14-5.diff 16-NOV-2001 - Added 05_nf_reroute-2.4.14-5pre1.diff 10-NOV-2001 - Added 02_masq_csum_reroute-2.2.20-IPVS-1.0.8-4.diff and 06_key_gw-2.2.20-IPVS-1.0.8-4.diff: LVS using multiple gateways 07-NOV-2001 - Sync with Linux 2.4.14 04-NOV-2001 - Sync with Linux 2.2.20 02-NOV-2001 - Patch v4 against IPVS 0.9.5 to support one-packet scheduling for UDP 29-OCT-2001 - Patch v3 against IPVS 0.9.5 to support one-packet scheduling for UDP 27-OCT-2001 - Patch against IPVS 0.9.5 to support per-packet scheduling for UDP 25-OCT-2001 - Sync with Linux 2.4.13 24-OCT-2001 - Route extension patches: porting to 2.4 for some of them 22-OCT-2001 - Two patches against IPVS 0.9.5 15-OCT-2001 - Some doc files updated 14-OCT-2001 - New jumbo patch for static routes, alternative routes, masquerading changes, route and ARP changes: routes-2.2.19-4.diff 11-OCT-2001 - Created dgd-usage.txt, updated dgd.txt - Sync with Linux 2.4.12 History started.