commit a4165fd081e570c1bfdaba8fc9f329022c2a19a2
author Vasyl Saienko <vsaienko@mirantis.com> Thu Nov 16 16:47:19 2017 +0200
committer Vasyl Saienko <vsaienko@mirantis.com> Thu Nov 16 14:55:54 2017 +0000
tree 4aecc3078804625112261fa0ce791378759ae40b
parent 2f4ba2278b4c7a1a329127cf7564a99d9e1f5b25

Allow to set auth_type for VRRP group

Keepalived supports two auth_types: PASS and AH
 * PASS - is a plaintext authentication, attacker
   can get password by simply sniffing traffic
 * AH - IPSEC-AH uses IPSEC Authentication Header

This patch allows to set auth_type per VRRP instance and change
default value to AH

Related-Prod: PROD-16096

Change-Id: I55b914b44df5963cb66062449b0cee4234ee2fd5

README.rst

diff --git a/README.rst b/README.rst
index 17410a4..eccd9a0 100644
--- a/README.rst
+++ b/README.rst
@@ -20,6 +20,7 @@
             nopreempt: True
             priority: 100 (highest priority must be on primary server, different for cluster members)
             virtual_router_id: 51
+            auth_type: AH
             password: pass
             address: 192.168.10.1
             interface: eth0
@@ -27,6 +28,7 @@
             nopreempt: True
             priority: 150 (highest priority must be on primary server, different for cluster members)
             virtual_router_id: 52
+            auth_type: PASS
             password: pass
             address: 10.0.0.5
             interface: eth1