CVS: cvs.openbsd.org: src

[Ryan Thomas McBride <mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2004/03/21 21:54:18

Modified files:
	sys/net        : if_pfsync.c if_pfsync.h pf.c pf_ioctl.c pfvar.h 
	sys/netinet    : ip_carp.c 

Log message:
Support for best effort bulk transfers of states when pfsync syncif is
configured.  This this allows pfsync+carp clusters to come up gracefully
without killing active connections. pfsync now prevents carp from
preempting to become master until the state table has sync'd.

ABI change, any application which use struct pf_state must be recompiled.

Reminded about this by Christian Gut. Thanks to beck@ cedric@ and dhartmei@
for testing and comments.

ok deraadt@