From 3df97beaa6ef8bbf8865c40266c69ed12a45e343 Mon Sep 17 00:00:00 2001 From: sebres Date: Wed, 11 May 2016 18:03:22 +0200 Subject: [PATCH] changelog entries from sebres:f2b-perfom-prepare-716 (gh-1346) --- ChangeLog | 33 +++++++++++++++++++++++++++++++-- 1 file changed, 31 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 4e272228..e30ea8c6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,10 +9,17 @@ Fail2Ban: Changelog ver. 0.10.0 (2016/XX/XXX) - gonna-be-released-some-time-shining ----------- -TODO: list all the fixes/enhancements/etc which came with the PR #1346 +TODO: implementing of options resp. other tasks from PR #1346 - Fixes: - + * [grave] memory leak's fixed (gh-1277, gh-1234) + * tricky bug fix: last position of log file will be never retrieved (gh-795), + because of CASCADE all log entries will be deleted from logs table together with jail, + if used "INSERT OR REPLACE" statement + * asyncserver (asyncore) code fixed and test cases repaired (again gh-161) + * testSocket: sporadical bug repaired - wait for server thread starts a socket (listener) + * testExecuteTimeoutWithNastyChildren: sporadical bug repaired - wait for pid file inside bash, + kill tree in any case (gh-1155) - New Features: * IPv6 support: @@ -28,6 +35,28 @@ TODO: list all the fixes/enhancements/etc which came with the PR #1346 - [Init?family=inet6] - IPv6 qualified hosts only - Enhancements: + * huge increasing of fail2ban performance and especially test-cases performance (see gh-1109) + * datedetector: in-place reordering using hits and last used time: + matchTime, template list etc. rewritten because of performance degradation + * prevent out of memory situation if many IP's makes extremely many failures (maxEntries) + * introduced string to seconds (str2seconds) for configuration entries with time, + use `1h` instead of `3600`, `1d` instead of `86400`, etc + * seekToTime - prevent completely read of big files first time (after start of service), + initial seek to start time using half-interval search algorithm (see issue gh-795) + * ticket and some other modules prepared to easy merge with newest version of 'ban-time-incr' + * cache dnsToIp, ipToName to prevent long wait during retrieving of ip/name, + especially for wrong dns or lazy dns-system + * FailManager memory-optimization: increases performance, + prevents memory leakage, because don't copy failures list on some operations + * fail2ban-testcases - new options introduced: + - `-f`, `--fast` to decrease wait intervals, avoid passive waiting, and skip + few very slow test cases (implied memory database, see `-m` and no gamin tests `-g`) + - `-g`, `--no-gamin` to prevent running of tests that require the gamin (slow) + - `-m`, `--memory-db` - run database tests using memory instead of file + - `-i`, `--ignore` - negate [regexps] filter to ignore tests matched specified regexps + * background servicing: prevents memory leak on some platforms/python versions, using forced GC + in periodic intervals (latency and threshold) + * executeCmd partially moved from action to new module utils * several functionality of class `DNSUtils` moved to new class `IPAddr`, both classes moved to new module `ipdns` * pseudo-conditional section introduced, for conditional substitution resp.